Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Tigervnc Remote Desktop Security Risk on Red Hat Systems

published 3 months ago

Summary

A security update is available for Tigervnc, a remote desktop software, on Red Hat systems. This update fixes a security issue that could allow an attacker to execute malicious code on a vulnerable system if they gain access to the Tigervnc server. To protect your system, apply the latest security update as soon as possible.

What to do

Update redhat tigervnc to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-debuginfo to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-debugsource to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-icons to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-license to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-selinux to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-server to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-server-debuginfo to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-server-minimal to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-server-minimal-debuginfo to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-server-module to version 0:1.13.1-8.el9_4.10.
Update redhat tigervnc-server-module-debuginfo to version 0:1.13.1-8.el9_4.10.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-debuginfo	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-debugsource	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-icons	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-license	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-selinux	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-server	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-server-debuginfo	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-server-minimal	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-server-minimal-debuginfo	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-server-module	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10
Red Hat:rhel_e4s:9.4::appstream	redhat	tigervnc-server-module-debuginfo	< 0:1.13.1-8.el9_4.10 Fix: upgrade to 0:1.13.1-8.el9_4.10

Original advisory text

Red Hat Security Advisory: tigervnc security update

References

https://access.redhat.com/errata/RHSA-2026:46456 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485380 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485382 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485383 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485384 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485385 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485386 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485387 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485388 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2485389 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_46456.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-50256 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50256 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50256 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/bb5158f962dc935e58ef8b4b5fc... Third Party Advisory
https://lists.x.org/archives/xorg-announce/2026-June/003702.html Third Party Advisory
https://redhat.atlassian.net/browse/PSIRTSUPT-16950 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50257 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50257 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50257 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/f5abfb61994471023d8c6470428... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50258 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50258 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50258 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/543e108516428fc8c3bea91d656... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50259 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50259 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50259 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/867b59b33bee669cb412f1314e4... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50260 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50260 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50260 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-50261 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50261 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50261 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/bdd7bf57af208b1ddf57d4683d6... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50262 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50262 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50262 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/6d459e4daf715bea8abdafa8fb1... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50263 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50263 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50263 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/ecc634f1b2f7aa473d3a267eada... Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-50264 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-50264 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-50264 Vendor Advisory
https://gitlab.freedesktop.org/xorg/xserver/-/commit/339c279514326134b0878fc23ce... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Timeline

Published28 Jul 2026

Updated3 Aug 2026

First seen3 Aug 2026

Sources

RHSA-2026:46456 · OSV

Track software like this

Free during beta