Lucene search
K

9 matches found

SUSE CVE
SUSE CVE
added 2026/04/20 11:26 p.m.3 views

SUSE CVE-2026-33145

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled which is the default when not explicitly...

6.3CVSS6.2AI score0.00079EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/20 6:31 a.m.1 views

CVE-2026-33145

A flaw was found in xrdp. An authenticated remote user can exploit this vulnerability due to the unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled, xrdp executes client-supplied AlternateShell values via /bin/sh -c during session...

6.3CVSS6.1AI score0.00079EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/04/18 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-33145

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling...

6.3CVSS6.1AI score0.00079EPSS
Exploits0References3
NVD
NVD
added 2026/04/17 9:16 p.m.0 views

CVE-2026-33145

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled which is the default when not explicitly...

6.3CVSS0.00079EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/04/17 8:14 p.m.1 views

CVE-2026-33145

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled which is the default when not explicitly...

6.3CVSS6.3AI score0.00079EPSS
Exploits0
CVE
CVE
added 2026/04/17 8:14 p.m.5 views

CVE-2026-33145

xrdp (open source RDP server) versions up to 0.10.5 are affected by an authenticated remote command execution vulnerability in xrdp-sesman. When AllowAlternateShell is enabled (default if not configured), a client-supplied AlternateShell is passed and executed via /bin/sh -c during session initia...

6.3CVSS6.2AI score0.00079EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/17 8:14 p.m.0 views

CVE-2026-33145

xrdp is an open source RDP server. Versions through 0.10.5 allow an authenticated remote user to execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled which is the default when not explicitly...

6.3CVSS6.2AI score0.00079EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.3 views

xrdp 安全漏洞

XRDPT is an open-source remote desktop protocol server developed by Neutrinolabs. Versions of XRDPT prior to 0.10.5 contain security vulnerabilities. These vulnerabilities stem from improper handling of the AlternateShell parameter, which may allow authenticated remote users to execute arbitrary...

6.3CVSS6.1AI score0.00079EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/17 12:0 a.m.1 views

PT-2026-33505

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6 Description An authenticated remote user can execute arbitrary commands on the server due to unsafe handling of the AlternateShell parameter in xrdp-sesman. When the AllowAlternateShell setting is enabled, the...

6.5CVSS6.2AI score0.00079EPSS
Exploits0References20
Rows per page
Query Builder