RLSA-2026:73979 Critical: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass...

freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

A flaw was found in FreeRDP server. This vulnerability allows unauthenticated attackers to bypass server policies that disable Remote Desktop Services over Transport Layer Security RDSTLS connections. By sending incompatible protocol requests and then completing a TLS handshake, attackers can...

Critical: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

RockyLinux 10 : freerdp (RLSA-2026:73979)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:73979 advisory. freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass CVE-2026-91949 Tenable has extracted the preceding description block directly from the...

freerdp: FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

A flaw was found in FreeRDP server. This vulnerability allows unauthenticated attackers to bypass server policies that disable Remote Desktop Services over Transport Layer Security RDSTLS connections. By sending incompatible protocol requests and then completing a TLS handshake, attackers can...

CVE-2026-91949 FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

CVE-2026-91949

FreeRDP server versions 3.0.0 through 3.30.0 (before 3.31.0 ) contain a protocol negotiation bypass vulnerability. The root cause, as described in the associated GHSA advisory (GHSA-x7v6-xfx3-52j6), is that the server continues after a negotiation failure and dispatches a failure code as RDSTLS ,...

CVE-2026-91949 FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...

Linux Distros Unpatched Vulnerability : CVE-2026-91949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections...

CVE-2026-91949: Protection Mechanism Failure

FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS...