Red Hat Security Advisory

RHSA-2026:20546

freerdp security update

Released 2026-05-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server (v. 7 ELS) freerdp-2.1.1-5.el7_9.9, freerdp-libs-2.1.1-5.el7_9.9, freerdp-libs-2.1.1-5.el7_9.9.ppc +2
Red Hat Enterprise Linux Server Optional (v. 7 ELS) freerdp-devel-2.1.1-5.el7_9.9, freerdp-devel-2.1.1-5.el7_9.9.ppc, libwinpr-devel-2.1.1-5.el7_9.9 +1

TI-2026-24435 CVE-2026-31883

HIGH 81

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00337 Published 2026-03-13 Partial fix · 3.24.0 CWE-122

TI-2026-23361 CVE-2026-29775

HIGH 75

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00328 Published 2026-03-13 Partial fix · 3.24.0 CWE-787

TI-2026-24437 CVE-2026-31885

HIGH 74

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.0028 Published 2026-03-13 Fixed in 3.24.0 CWE-125

TI-2026-22295 CVE-2026-27951

HIGH 72

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00405 Published 2026-02-25 Partial fix · 3.23.0 CWE-190

TI-2026-24436 CVE-2026-31884

HIGH 66

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00322 Published 2026-03-13 Partial fix · 3.24.0 CWE-369

TI-2026-20977 CVE-2026-25952

MEDIUM 64

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00687 Published 2026-02-25 Partial fix · 3.23.0 CWE-416

TI-2026-21465 CVE-2026-26986

MEDIUM 58

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00557 Published 2026-02-25 Partial fix · 3.23.0 CWE-416

TI-2026-26326 CVE-2026-33985

LOW 31

FreeRDP is a free implementation of the Remote Desktop Protocol.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00213 Published 2026-03-30 Partial fix · 3.24.2 CWE-125