Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.9
xrdp may let attackers gain unauthorized remote access
published 4 days ago
Summary
The xrdp program used for remote desktop connections contains a weakness that could let an unauthenticated user connect to the system. This could expose internal data or allow further attacks. Apply the latest security update for cleanstart/xrdp as soon as possible to close the gap.
What to do
- Update cleanstart xrdp to version 0.9.15-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | xrdp |
< 0.9.15-r1 Fix: upgrade to 0.9.15-r1
|
Original advisory text
In the xrdp package (in branches through 3
Security vulnerability affects the xrdp package. In the xrdp package (in branches through 3.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2023-AY05571 · OSV
Track software like this
Free during beta