Linuxsecurity Critical xrdp Vulnerabilities in Fedora 44 and 42 Require Immediate Attention
Article Content
- •Multiple critical vulnerabilities in xrdp affect Fedora 44 and 42.
- •CVE-2026-32105 and CVE-2026-32107 allow for privilege escalation and data integrity issues.
- •Immediate patching is required to prevent remote code execution and denial of service attacks.
A critical security update for Fedora 44 addresses multiple vulnerabilities in xrdp, including CVE-2026-32105, CVE-2026-32107, CVE-2026-32623, CVE-2026-32624, CVE-2026-33145, CVE-2026-33516, CVE-2026-33689, and CVE-2026-35512. These vulnerabilities allow for remote code execution, privilege escalation, and denial of service attacks. The flaws are particularly concerning as they affect a widely used RDP server compatible with various clients, including FreeRDP and Microsoft RDP. The vulnerabilities were published on April 17, 2026, and have been addressed in the latest updates. Users are advised to apply the patches immediately to mitigate potential exploitation. The issues were identified in versions prior to 0.10.6 of xrdp. The update also includes bug fixes and new features aimed at improving functionality. Organizations using affected versions are at risk of significant security breaches if they do not update promptly.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Fedora and CVE-2026-32105 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host… 
Lazarus APT Launches Operation FlashHole Using AI and Post-Quantum Cryptography Kaspersky has identified a cyberespionage campaign, dubbed Operation FlashHole, attributed to the Lazarus APT group, active since July 2025. The campaign has targeted at least three organizations in South Korea's construction, software, and wire-communication sectors. Attack methods include spear-phishing emails…