Vulnerabilities in neutrinolabs
34 resultsCVE-2026-32623HIGHxrdp: Heap buffer overflow in NeutrinoRDP channel reassemblyEPSS 0.5%CVE-2026-44978MEDIUMxrdp: Unchecked FIPS padding length in standard RDP Security causes heap out-of-bounds read in HMAC verificationEPSS 0.5%CVE-2026-55238MEDIUMxrdp: Malformed Confirm Active capability sets cause out-of-bounds readsEPSS 0.5%CVE-2022-23613HIGHPrivilege escalation on xrdpEPSS 0.5%CVE-2026-33689HIGHxrdp: Pre-authentication out-of-bounds reads in channel parsersEPSS 0.5%CVE-2026-55645MEDIUMxrdp: Out-of-bounds read in Client Control PDU processing (xrdp_rdp_process_data_control)EPSS 0.5%CVE-2026-33516HIGHxrdp: Pre-authentication out-of-bounds reads in RDP capability and channel parsersEPSS 0.4%CVE-2026-55639MEDIUMxrdp: Out-of-bounds read in GCC Conference Create Request CS_SECURITY processing (xrdp_sec_process_mcs_data_CS_SECURITY)EPSS 0.4%CVE-2026-42218MEDIUMXRDP is vulnerable to a server timing attack, leading to user enumerationEPSS 0.4%CVE-2026-32624MEDIUMxrdp: Heap buffer overflow in xrdp_sec_process_logon_info() via incorrect g_strncat length calculationEPSS 0.4%CVE-2026-33145MEDIUMxrdp: Authenticated RCE via unsanitized AlternateShell execution in xrdp-sesmanEPSS 0.4%CVE-2026-55626HIGHxrdp: No authentication required with Xvnc backend on RHEL 9EPSS 0.2%CVE-2026-32105CRITICALxrdp: RDP MAC signature (dataSignature) never verified on receive — integrity bypass in non-TLS modeEPSS 0.2%CVE-2026-32107HIGHxrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid failsEPSS 0.2%