1 matches found
CVE-2026-40254: Off-by-one Error
FreeRDP is a free implementation of the Remote Desktop Protocol. Versions prior to 3.25.0 have an off-by-one in the path traversal filter in channels/drive/client/drivefile.c. The containsdotdot function catches ../ and ..\ mid-path but misses .. when it's the last component with no trailing...
6.1CVSS5.9AI score0.00228EPSS
SaveExploits1References4
20