HIGH Published November 4, 2026

CVE-2026-121960

FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPR_ASSERT and abort the server process.

CVSS base score

7.5 (v3.1)

Severity

HIGH

Attack vector

Network

Weakness

CWE-617

Last modified

November 5, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

freerdp freerdp

References

github.com Exploit, Mitigation, Vendor Advisory
www.vulncheck.com Third Party Advisory
github.com Exploit, Mitigation, Vendor Advisory

View full NVD advisory →

More freerdp vulnerabilities

Published the same day

← Back to CVE watch

CVE-2026-121960

Affected products

References

More freerdp vulnerabilities

Published the same day

Related reading