Lucene search
K

7 matches found

OSV
OSV
added 2026/04/17 8:16 p.m.3 views

DEBIAN-CVE-2026-32105

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code MAC signature of encrypted RDP packets when using the "Classic RDP Security" layer. While the sender correctly generates signatures, the receiving logic lacks th...

7.7CVSS5.3AI score0.00048EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/04/17 7:27 p.m.2 views

CVE-2026-32105 xrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS mode

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code MAC signature of encrypted RDP packets when using the "Classic RDP Security" layer. While the sender correctly generates signatures, the receiving logic lacks th...

9.3CVSS5.6AI score0.00048EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/04/17 7:27 p.m.3 views

CVE-2026-32105

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code MAC signature of encrypted RDP packets when using the "Classic RDP Security" layer. While the sender correctly generates signatures, the receiving logic lacks th...

9.3CVSS5.3AI score0.00048EPSS
Exploits0
EUVD
EUVD
added 2026/04/17 7:27 p.m.1 views

EUVD-2026-23472

xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code MAC signature of encrypted RDP packets when using the "Classic RDP Security" layer. While the sender correctly generates signatures, the receiving logic lacks th...

9.3CVSS5.6AI score0.00048EPSS
Exploits0References2
CVE
CVE
added 2026/04/17 7:27 p.m.5 views

CVE-2026-32105

This CVE concerns xrdp, an open source RDP server. In versions up to 0.10.5, xrdp does not verify the MAC (8-byte integrity signature) of RDP packets when using the Classic RDP Security layer. The receiver’s logic fails to validate the MAC, allowing an unauthenticated attacker with MITM capabilit...

9.3CVSS5.6AI score0.00048EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2026/04/17 12:0 a.m.6 views

xrdp 安全漏洞

xrdp is an open-source remote desktop protocol server developed by Neutrinolabs. Versions of xrdp 0.10.5 and earlier contain security vulnerabilities. These vulnerabilities stem from the lack of verification of the message authentication code signature for encrypted RDP packets when the classic R...

9.3CVSS5.9AI score0.00048EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2018-6711

Malware in sbrugna...

7.5CVSS7.7AI score0.0023EPSS
Exploits0References2
Rows per page
Query Builder