Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/24 12:00 a.m.•2 views

CVE-2026-40254: Off-by-one Error

FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have an off-by-one in the path traversal filter in channels/drive/client/drivefile.c. The containsdotdot function catches ../ and ..\ mid-path but misses .. when it's the last component with no trailing...

6.1CVSS5.9AI score0.00228EPSS
SaveExploits1References4
Rows per page
Query Builder