Skip to main content

Ubuntu CVE-2026-55645

| EUVDEUVD-2026-46026 MEDIUM
Out-of-bounds Read (CWE-125)
2026-07-09 vendor:ubuntu
Buffer Overflow Information Disclosure Xrdp Suse Neutrinolabs
6.5
CVSS 3.1 · Vendor: vendor:ubuntu
Share

Severity by source

Vendor (vendor:ubuntu) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
SUSE
MEDIUM
qualitative

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
Low

Lifecycle Timeline

3
Patch available
Jul 20, 2026 - 18:18 EUVD
CVSS changed
Jul 20, 2026 - 17:22 NVD
6.5 (MEDIUM)
Analysis Generated
Jul 09, 2026 - 15:32 vuln.today

DescriptionCVE.org

[Unknown description]

AnalysisAI

CVE-2026-55645 is associated with Ubuntu based on vendor reporting, but no description, CVSS score, vector, or CWE data is available at time of analysis. The nature, impact, and scope of this vulnerability cannot be characterized from the provided intelligence. Security teams should consult the Ubuntu Security Notices (USN) portal directly for authoritative details as this advisory matures.

Technical ContextAI

No technical details are available for this CVE. The sole intelligence signal is attribution to the Ubuntu vendor source, suggesting the affected component is part of the Ubuntu Linux distribution or its package ecosystem. Without a CWE, CPE strings, or description, the underlying technology, root cause class, and specific affected packages cannot be determined.

RemediationAI

No remediation can be prescribed at this time. No patch version, workaround, or advisory URL is available in the provided data. Monitor the Ubuntu Security Notices portal (ubuntu.com/security/notices) and the NVD entry for CVE-2026-55645 for updates. If this CVE is being tracked for compliance purposes, flag it as 'pending vendor disclosure' until a USN is published.

More in Xrdp

View all
CVE-2026-41252 CRITICAL
9.8 Jul 09

Remote unauthenticated heap buffer overflow in xrdp (the open-source Remote Desktop Protocol server from neutrinolabs) a
CVE-2013-1430 CRITICAL
9.8 Dec 16

An issue was discovered in xrdp before 0.9.1. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploit
CVE-2024-39917 CRITICAL
9.8 Jul 12

xrdp is an open source RDP server. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no au
CVE-2022-23484 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23480 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23479 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23478 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23477 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2022-23468 CRITICAL
9.8 Dec 09

xrdp is an open source project which provides a graphical login to remote machines using Microsoft Remote Desktop Protoc
CVE-2026-32105 CRITICAL
9.3 Apr 17

Missing MAC signature verification in xrdp 0.10.5 and earlier allows man-in-the-middle attackers to modify encrypted RDP
CVE-2026-41521 CRITICAL
9.1 Jul 09

Information disclosure in xrdp (neutrinolabs open-source RDP server) before version 0.10.6.1 stems from an integer overf
CVE-2025-68670 CRITICAL
9.1 Jan 27

xrdp open-source RDP server before v0.10.5 has an unauthenticated stack buffer overflow enabling remote code execution.

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2025-5777 CRITICAL POC
9.3
CVE-2016-1646 HIGH POC
8.8
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected
SUSE Linux Enterprise Server 15 SP7 Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7 Affected

Share

CVE-2026-55645 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy