Red Hat Product Security issued an advisory (RHSA-2026:6005) for FreeRDP in Red Hat Enterprise Linux 8, addressing two vulnerabilities: CVE-2026-26965, an arbitrary code execution vulnerability due to a heap out-of-bounds write in the RLE planar decode path, and CVE-2026-26955, an arbitrary code execution vulnerability due to a heap buffer overflow in the GDI surface pipeline. Both vulnerabilities could allow attackers to execute arbitrary code. Red Hat has released updated FreeRDP packages (version 2.11.7-4.el8_10) to remediate these issues across multiple architectures including x86_64, s390x, ppc64le, and aarch64. The advisory rates the security impact as Important (high severity). No known exploits in the wild have been reported at the time of the advisory.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code on systems running vulnerable versions of FreeRDP. This could lead to full compromise of the affected system depending on the privileges of the FreeRDP process. The vulnerabilities stem from heap out-of-bounds write and heap buffer overflow conditions in FreeRDP's decoding and rendering components.

Red Hat has released updated FreeRDP packages that fix these vulnerabilities. Users running Red Hat Enterprise Linux 8 and related distributions should apply the security update as described in the Red Hat advisory RHSA-2026:6005 and the referenced article https://access.redhat.com/articles/11258. Applying these official updates is the recommended remediation. No additional mitigation steps are indicated by the vendor.