What is the CVSS score of CVE-2026-44178?

CVE-2026-44178 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.9%.

Which versions of xrdp are affected by CVE-2026-44178?

xrdp, a critical remote access service used in Linux/Unix environments, contains a heap buffer overflow vulnerability (CVSS 8.8) that allows authenticated users to achieve arbitrary code execution…. A patch is available.

How to fix or mitigate CVE-2026-44178?

Within 24 hours, audit your infrastructure to identify all systems running xrdp and assess network exposure-particularly any instances accessible from untrusted networks or with weak credential controls. Within 7 days, deploy xrdp v0.10.6.1 (released 2026-07-06) to all affected systems; for systems where immediate patching is not feasible, implement network-level access controls to restrict connections to xrdp ports (typically 3389) to known, trusted IP ranges only. Within 30 days, complete patch deployment across all systems, conduct a post-remediation security scan to verify no vulnerable instances remain, and review access logs for any suspicious authenticated connection attempts during the exposure window.

xrdp CVE-2026-44178

EUVD-2026-46028 HIGH

Heap-based Buffer Overflow (CWE-122)

2026-07-09 vendor:ubuntu

Buffer Overflow Heap Overflow Xrdp Suse Neutrinolabs

8.8

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Network-reachable RDP parser overflow with no user interaction (AV:N/AC:L/UI:N); PR:L reflects the privilege the CVSS data indicates, with full CIA impact from heap corruption in the xrdp process.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch available

Jul 20, 2026 - 18:18 EUVD

Source Code Evidence Fetched

Jul 20, 2026 - 17:36 vuln.today

Analysis Updated

Jul 20, 2026 - 17:36 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jul 20, 2026 - 17:22 vuln.today

cvss_changed

CVSS changed

Jul 20, 2026 - 17:22 NVD

8.8 (HIGH)

Analysis Generated

Jul 09, 2026 - 19:50 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

Heap-based buffer overflow in neutrinolabs xrdp (open-source RDP server for Linux/Unix) lets a low-privileged authenticated attacker corrupt heap memory over the network, achieving high-impact confidentiality, integrity, and availability compromise (CVSS 8.8), potentially arbitrary code execution in the xrdp process. Fixed in xrdp v0.10.6.1 (2026-07-06) via advisory GHSA-hh7r-2rmq-q4g4, one of ten CVEs patched in that release. No public exploit identified at time of analysis and it is not listed in CISA KEV.

Technical ContextAI

xrdp implements the Microsoft Remote Desktop Protocol (RDP) on POSIX systems, brokering client sessions to backends such as Xvnc or Xorg. The root cause is classified as CWE-122 (Heap-based Buffer Overflow), corroborated by the vendor tags 'Buffer Overflow' and 'Heap Overflow', meaning attacker-influenced data is written past the bounds of a heap-allocated buffer - typically during parsing of RDP protocol structures where a length/size field is trusted without adequate validation. Because xrdp parses complex, attacker-controlled RDP PDUs in C, such memory-safety flaws can lead to heap metadata or adjacent-object corruption and, depending on allocator state, controlled writes. Exact affected component is not disclosed in the available data; the GitHub Security Advisory GHSA-hh7r-2rmq-q4g4 is the authoritative source for the affected code path.

RemediationAI

Vendor-released patch: xrdp v0.10.6.1 - upgrade to this version or later, which fixes CVE-2026-44178 along with nine other CVEs and one regression (see https://github.com/neutrinolabs/xrdp/releases/tag/v0.10.6.1 and advisory https://github.com/neutrinolabs/xrdp/security/advisories/GHSA-hh7r-2rmq-q4g4). Distribution users should apply the corresponding vendor security update (e.g., Ubuntu's patched xrdp package) rather than building from source where feasible. If patching cannot be immediate, restrict network exposure of the xrdp service (default TCP 3389) to trusted management networks or place it behind a VPN, and enforce firewall/access-control lists so only authorized clients can reach the RDP listener - the trade-off is reduced remote accessibility for legitimate users. Because exploitation requires some privilege (PR:L), tightening account provisioning and monitoring authentication to xrdp further limits exposure until the upgrade is deployed.

More in Xrdp

View all

CVE-2026-41252 CRITICAL Act Now

9.8 Jul 09

Remote unauthenticated heap buffer overflow in xrdp (the open-source Remote Desktop Protocol server from neutrinolabs) a

CVE-2013-1430 CRITICAL Act Now

9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit

CVE-2024-39917 CRITICAL Act Now

9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au

CVE-2022-23484 CRITICAL Act Now

9.8 Dec 09