DEBIAN-CVE-2026-121957: High severity debian/freerdp2 vulnerability

Q: What level of access does an attacker need?

The CVSS vector indicates exploitation can be performed remotely over a network with low attack complexity. No prior privileges or user interaction are required.

Q: What is the expected impact of successful exploitation?

The reported impact is high confidentiality impact. Integrity and availability impacts are listed as none.

Published Nov 4, 2026

Updated

Affected Software

3 affected componentsFixes available

debian/freerdp2*

debian/freerdp3*

debian/freerdp3<3.32.2+dfsg-1

3.32.2+dfsg-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/freerdp3 to a version that resolves this vulnerability.
Fixed in 3.32.2+dfsg-1

Event History

Nov 4, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What level of access does an attacker need?

The CVSS vector indicates exploitation can be performed remotely over a network with low attack complexity. No prior privileges or user interaction are required.

What is the expected impact of successful exploitation?

The reported impact is high confidentiality impact. Integrity and availability impacts are listed as none.

DEBIAN-CVE-2026-121957: High severity debian/freerdp2 vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

What level of access does an attacker need?

What is the expected impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need?

What is the expected impact of successful exploitation?