What is the CVSS score of CVE-2026-55639?

CVE-2026-55639 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. EPSS exploitation probability: 0.4%.

Is there a patch available for CVE-2026-55639?

Yes, a patch is available for CVE-2026-55639. Update the affected software to the latest version immediately.

Ubuntu (unconfirmed) CVE-2026-55639

EUVD-2026-46042 MEDIUM

Out-of-bounds Read (CWE-125)

2026-07-09 vendor:ubuntu

Buffer Overflow Information Disclosure Xrdp Neutrinolabs

5.3

CVSS 3.1 · Vendor: vendor:ubuntu

Severity by source

Vendor (vendor:ubuntu) PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

SUSE

MEDIUM

qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Lifecycle Timeline

Patch available

Jul 20, 2026 - 19:03 EUVD

CVSS changed

Jul 20, 2026 - 18:22 NVD

5.3 (MEDIUM)

Analysis Generated

Jul 09, 2026 - 15:32 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

Insufficient data exists to characterize CVE-2026-55639 with confidence. The sole intelligence signal is a vendor source tag of 'ubuntu', suggesting the affected product is within the Ubuntu ecosystem, but no description, CVSS vector, CWE classification, or advisory text was provided. The vulnerability's impact, attack vector, and affected versions remain entirely uncharacterized from the available data.

Technical ContextAI

No description, CWE, or CPE strings were provided for this CVE. The only attribution is 'vendor:ubuntu', indicating the reporting or affected party is Canonical/Ubuntu. Without a CWE or technical description, the root cause class, affected library, and underlying protocol cannot be determined. Further data from NVD, Ubuntu Security Notices (USN), or Canonical's security advisories is required.

RemediationAI

No remediation can be specified - patch version, affected component, and fix availability are all unknown. Monitor Canonical's Ubuntu Security Notices (USN) and the Ubuntu CVE tracker for updates on CVE-2026-55639. Until an advisory is published, organizations should watch for USN bulletins referencing this CVE ID. No patch is confirmed available at time of analysis.

More in Xrdp

View all

CVE-2026-41252 CRITICAL Act Now

9.8 Jul 09

Remote unauthenticated heap buffer overflow in xrdp (the open-source Remote Desktop Protocol server from neutrinolabs) a

CVE-2013-1430 CRITICAL Act Now

9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit

CVE-2024-39917 CRITICAL Act Now

9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au

CVE-2022-23484 CRITICAL Act Now

9.8 Dec 09