What is the CVSS score of CVE-2026-44978?

CVE-2026-44978 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.5%.

Is there a patch available for CVE-2026-44978?

Yes, a patch is available for CVE-2026-44978. Update the affected software to the latest version immediately.

Unknown (Ubuntu-reported) CVE-2026-44978

EUVD-2026-46030 MEDIUM

Improper Input Validation (CWE-20)

2026-07-09 vendor:ubuntu

Information Disclosure Xrdp Suse Neutrinolabs

5.3

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SUSE

MEDIUM

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Patch available

Jul 20, 2026 - 18:18 EUVD

CVSS changed

Jul 20, 2026 - 17:22 NVD

5.3 (MEDIUM)

Analysis Generated

Jul 09, 2026 - 19:06 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-44978 has insufficient public data to characterize at this time. The only confirmed intelligence source is a Ubuntu vendor report, but no description, CVSS metrics, CWE classification, or affected product details are available in the current dataset. Security teams should treat this as an unresolved entry requiring further data gathering before risk assessment or remediation decisions can be made.

Technical ContextAI

No technical details are available for this CVE. The sole intelligence signal - a Ubuntu vendor report - suggests the vulnerability may affect a package or component present in the Ubuntu ecosystem, but the specific product, library, or protocol involved cannot be determined without a description, CPE strings, or CWE classification. No root cause class can be assigned.

RemediationAI

No remediation guidance can be issued at this time because the affected product, vulnerability class, and patch status are all unknown. No vendor-released patch has been identified in the available data. Analysts should monitor the Ubuntu Security Notices (usn.ubuntu.com) and the NVD entry for CVE-2026-44978 for updates. As a conservative interim measure, organizations using Ubuntu-based systems should ensure standard patch management processes are active so that any forthcoming Ubuntu security update is applied promptly upon release.

More in Xrdp

View all

CVE-2026-41252 CRITICAL Act Now

9.8 Jul 09

Remote unauthenticated heap buffer overflow in xrdp (the open-source Remote Desktop Protocol server from neutrinolabs) a

CVE-2013-1430 CRITICAL Act Now

9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit

CVE-2024-39917 CRITICAL Act Now

9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au

CVE-2022-23484 CRITICAL Act Now

9.8 Dec 09