https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T10:39:01.240678+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-24882 CVE-2022-24882 — Server side NTLM does not properly check parameters in FreeRDP 2026-09-29T10:39:01.277591+00:00

Affected: FreeRDP

FreeRDP is a free implementation of the Remote Desktop Protocol (RDP). In versions prior to 2.7.0, NT LAN Manager (NTLM) authentication does not properly abort when someone provides and empty password value. This issue affects FreeRDP based RDP Server implementations. RDP clients are not affected. The vulnerability is patched in FreeRDP 2.7.0. There are currently no known workarounds.

 https://vulnerability.circl.lu/vuln/usn-5461-1 USN-5461-1 — freerdp2 vulnerabilities 2026-09-29T10:39:01.277691+00:00

Affected: Ubuntu:18.04:LTS: freerdp2, Ubuntu:20.04:LTS: freerdp2, Ubuntu:22.04:LTS: freerdp2

It was discovered that FreeRDP incorrectly handled empty password values. A remote attacker could use this issue to bypass server authentication. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 21.10. (CVE-2022-24882)

It was discovered that FreeRDP incorrectly handled server configurations with an invalid SAM file path. A remote attacker could use this issue to bypass server authentication. (CVE-2022-24883)