Bundesamt für Sicherheit in der Informationstechnik Open Source · FreeRDP: Schwachstelle ermöglicht Codeausführung und Denial of Service
Affects Bundesamt für Sicherheit in der Informationstechnik Open SourceSource GCVE Database
Rated by Threat Radar
- Patch
- Available – fixed in 3.27.1
Data as of 26 Oct 2026, 15:55 UTC
What to do
Upgrade Bundesamt für Sicherheit in der Informationstechnik Open Source to 3.27.1.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Bundesamt für Sicherheit in der Informationstechnik Open Source | Affected
| Fixed in
|
AI-suggested
If you cannot patch yet, consider limiting exposure of FreeRDP services to untrusted networks.
Description
A vulnerability in FreeRDP, an open-source implementation of the Remote Desktop Protocol (RDP), allows for potential code execution and denial of service. The issue affects versions up to and including 3.27.1. No CVE identifier or CVSS score is currently assigned. There is no information about known exploits in the wild or available patches. The vulnerability was published by the German Federal Office for Information Security (BSI).
References
- wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1963.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1963 (opens in a new tab)
- github.com/FreeRDP/FreeRDP/security/advisories/GHSA-c495-h83v-3prp (opens in a new tab)
- ubuntu.com/security/notices/USN-8561-2 (opens in a new tab)
- access.redhat.com/errata/RHSA-2026:50747 (opens in a new tab)
- errata.build.resf.org/RLSA-2026:50747 (opens in a new tab)
- linux.oracle.com/errata/ELSA-2026-50747.html (opens in a new tab)