CVE-2026-121401

FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...

EUVD-2026-115933

FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...

CVE-2026-121401 FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet

FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...

CVE-2026-121401

FreeRDP versions before 3.32.2 are vulnerable to a Denial of Service (DoS) condition. The issue resides in the rdg_process_packet function, which dispatches a PKT_TYPE_EXTENDED_AUTH_MSG without properly verifying the auth context or negotiated mode. This allows a malicious or compromised RD Gatew...

CVE-2026-121401: FreeRDP: FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a…

FreeRDP before 3.32.2 contains a denial of service vulnerability where rdgprocesspacket dispatches a PKTTYPEEXTENDEDAUTHMSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a...