CVE-2026-85089

A flaw was found in FreeRDP. This vulnerability allows a remote attacker with low privileges to disclose sensitive information from the server or proxy process memory to a downstream client. This occurs because certain functions responsible for writing Save Session Info Protocol Data Units PDUs u...

CVE-2026-20280

creationtimestamp| type| source ---|---|--- 2026-09-03 08:46:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 11:04:46+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mumcje5hr22b 2026-09-03 11:04:47+00:00| seen|...

CVE-2026-20281

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:29+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:05+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 13:45:12+00:00| seen|...

CVE-2026-20355

creationtimestamp| type| source ---|---|--- 2026-09-03 08:45:03+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=2046 2026-09-03 08:46:09+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-24 2026-09-03 10:44:22+00:00| seen|...

CVE-2026-85089

creationtimestamp| type| source ---|---|--- 2026-09-03 03:45:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6gne2scotqcce...

CVE-2026-85089

FreeRDP versions 3.0.0 through 3.30.0 are affected by an information disclosure vulnerability in the Save Session Info PDU writers within libfreerdp/core/info.c. Three functions (rdp_write_logon_info_v2, rdp_write_logon_info_plain, and rdp_write_logon_info_ex) use Stream_Seek instead of Stream_Ze...

EUVD-2026-70299

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-85089 FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory

FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in libfreerdp/core/info.c rdpwritelogoninfov2, rdpwritelogoninfoplain, and rdpwritelogoninfoex use StreamSeek instead of StreamZero for reserv...

CVE-2026-67445

creationtimestamp| type| source ---|---|--- 2026-09-03 00:35:02+00:00| published-proof-of-concept| https://github.com/axllent/mailpit/security/advisories/GHSA-w878-pj84-3j5v 2026-09-03 05:32:21+00:00| seen| https://gist.github.com/alon710/25d950fb1b775a5961200e6e2792284d...

VulnCheck KEV: CVE-2026-84755

Unauthenticated Broken Access Control in Mail Mint = 1.31.0 versions...

Linux Distros Unpatched Vulnerability : CVE-2026-85089

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions 3.0.0 through 3.30.0 before 3.31.0 transmit uninitialized heap memory in Save Session Info PDU reserved padding fields. Three PDU writers in...

HPESBHF05110 rev.1 - HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01427, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Remote: Denial of Service DoS, Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1570...

PT-2026-85122

Unauthenticated Cross Site Scripting XSS in Quick Event Manager = 9.17 versions...

HPESBHF05108 rev.1 - HPE StoreEasy Server Using Certain Intel Processors, INTEL-SA-01436, Intel Trust Domain Extensions (Intel TDX) module Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to BIOS v3.0008-20-2026 HPE StoreEasy 1470 Storage - Prior to BIOS v3.0008-20-2026 HPE...

CVE-2026-65842

creationtimestamp| type| source ---|---|--- 2026-09-02 23:38:43+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3mul46l4zvz2q 2026-09-03 10:32:33+00:00| seen| https://gist.github.com/alon710/b49a4882cbb663c91159acdfe34ae468...

CVE-2026-84887

creationtimestamp| type| source ---|---|--- 2026-09-02 23:17:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gw7vxsp5ybbou...

CVE-2025-52940

creationtimestamp| type| source ---|---|--- 2026-09-02 23:00:05+00:00| seen| https://t.me/payloadUAV/168 2026-09-03 00:00:36+00:00| seen| https://t.me/payloadUAV/168...

CVE-2025-52941

creationtimestamp| type| source ---|---|--- 2026-09-02 23:00:05+00:00| seen| https://t.me/payloadUAV/168 2026-09-03 00:00:35+00:00| seen| https://t.me/payloadUAV/168...

CVE-2026-82524

creationtimestamp| type| source ---|---|--- 2026-09-02 22:12:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ylumwggqsioj 2026-09-03 12:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mumg64dzts2l...