The vulnerability of the GCC Conference Create Request server XRDP allows a hacker to disclose sensitive information.

The vulnerability of the GCC Conference Create Request server XRDP lies in the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

CVE-2026-55639

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

CVE-2026-55639 xrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a vulnerability concerning the parsing of Client Security Data within the Client MCS Connect Initial PDU with GCC Conference Create Request during the connection sequence. During the initial capability and security negotiation...

CVE-2026-55639

CVE-2026-55639 affects xrdp up to version 0.10.6, where the parser for Client Security Data in GCC Conference Create Request within the Client MCS Connect Initial PDU lacks proper length validation during initial capability/security negotiation. A remote, unauthenticated attacker could send a cra...