What is the CVSS score of CVE-2026-55238?

CVE-2026-55238 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L. EPSS exploitation probability: 0.5%.

Is there a patch available for CVE-2026-55238?

Yes, a patch is available for CVE-2026-55238. Update the affected software to the latest version immediately.

Ubuntu (Unknown Package) CVE-2026-55238

EUVD-2026-46036 MEDIUM

Buffer Over-read (CWE-126)

2026-07-09 vendor:ubuntu

Buffer Overflow Xrdp Suse Neutrinolabs

5.3

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

SUSE

MEDIUM

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

Low

Lifecycle Timeline

Patch available

Jul 20, 2026 - 18:18 EUVD

CVSS changed

Jul 20, 2026 - 17:22 NVD

5.3 (MEDIUM)

Analysis Generated

Jul 09, 2026 - 15:31 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-55238 has insufficient public data to characterize at time of analysis. The sole intelligence source is a Ubuntu vendor report, with no description, no CVSS scoring, no CWE classification, and no advisory content available. Security teams should treat this as an unverified, uncharacterized vulnerability pending vendor disclosure. No exploitation status, affected product details, or impact scope can be determined from available data.

Technical ContextAI

No technical context is available. The only attribution is to the Ubuntu vendor reporting channel, suggesting the affected component is a package distributed via Ubuntu repositories. Without a description, CWE, CPE strings, or advisory content, the underlying technology, protocol, or library involved cannot be identified. This analysis cannot characterize root cause, attack surface, or affected subsystem.

RemediationAI

No remediation guidance can be provided at this time. No patch, fix version, workaround, or vendor advisory was included in the available intelligence. Security teams should monitor the Ubuntu Security Notices (USN) channel and the Ubuntu CVE Tracker for future disclosure. Until the CVE is characterized, apply general Ubuntu hardening posture and ensure systems are on current Ubuntu patch levels. No specific compensating controls can be recommended without knowing the affected component.

More in Xrdp

View all

CVE-2026-41252 CRITICAL Act Now

9.8 Jul 09

Remote unauthenticated heap buffer overflow in xrdp (the open-source Remote Desktop Protocol server from neutrinolabs) a

CVE-2013-1430 CRITICAL Act Now

9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit

CVE-2024-39917 CRITICAL Act Now

9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au

CVE-2022-23484 CRITICAL Act Now

9.8 Dec 09