BSD Portsxrdp -- multiple vulnerabilities
· CVE-2026-41252, CVE-2026-41521, CVE-2026-44178, CVE-2026-42218, CVE-2026-44978, CVE-2026-54538, CVE-2026-55238, CVE-2026-55626, CVE-2026-55639, CVE-2026-55645 · VuXML entry
xrdp projects reports: xrdp v0.10.6.1 fixes 10 vulnerabilities and 1 regression introduced by a vulnerability fix in the previous release.
Affected versions
- xrdp < 0.10.6.1.r.1,1
- xrdp-devel < 0.10.80.b20260706,1
By system
3 still vulnerable, 0 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| DragonFly | net/xrdp | 0.9.26,1 | vulnerable since 2026-07-06 | |
| FreeBSD | net/xrdp | 0.10.6.1_3,1 | vulnerable since 2026-07-06 | |
| FreeBSD | net/xrdp-devel | 0.10.80.b20260702_2,1 | vulnerable since 2026-07-06 |