CVE-2026-91949
freerdp3: FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated...
CVE-2026-91949 is fixed in 34 products on 1 platform, first by RHSA-2026:74471, released September 11, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
9.3
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0058
47th percentile
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| freerdp · RHEL 10 | 3.10.3-3.el10_0.18 | RHSA-2026:74471 | Sep 11, 2026 |
| freerdp · almalinux 10 | 2:3.10.3-12.el10_2.13 | ALSA-2026:73979 | Sep 30, 2026 |
| freerdp · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp · ol 10 | 2:3.10.3-12.el10_2.13 | ELSA-2026-73979 | Sep 30, 2026 |
| freerdp · rocky 10 | 2:3.10.3-12.el10_2.13 | RLSA-2026:73979 | Oct 2, 2026 |
| freerdp-debuginfo · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp-debugsource · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp-devel · almalinux 10 | 2:3.10.3-12.el10_2.13 | ALSA-2026:73979 | Sep 30, 2026 |
| freerdp-devel · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp-devel · ol 10 | 2:3.10.3-12.el10_2.13 | ELSA-2026-73979 | Sep 30, 2026 |
| freerdp-libs · almalinux 10 | 2:3.10.3-12.el10_2.13 | ALSA-2026:73979 | Sep 30, 2026 |
| freerdp-libs · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp-libs · ol 10 | 2:3.10.3-12.el10_2.13 | ELSA-2026-73979 | Sep 30, 2026 |
| freerdp-libs-debuginfo · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp-proxy · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp-proxy 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp-proxy-modules · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp-proxy-modules 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp-sdl · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp-sdl 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp-server · almalinux 10 | 2:3.10.3-12.el10_2.13 | ALSA-2026:73979 | Sep 30, 2026 |
| freerdp-server · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp-server · ol 10 | 2:3.10.3-12.el10_2.13 | ELSA-2026-73979 | Sep 30, 2026 |
| freerdp-server-debuginfo · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| freerdp-shadow-x11 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp-shadow-x11 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp-wayland · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp-wayland 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp-x11 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp-x11 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp3 · Debian 14 | 3.31.0+dfsg-1 | DEBIAN-CVE-2026-91949 | Sep 17, 2026 |
| freerdp3-proxy · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp3-proxy 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp3-proxy-modules · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp3-proxy-modules 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp3-sdl · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp3-sdl 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp3-shadow-x11 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | freerdp3-shadow-x11 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| freerdp3-shadow-x11 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp3-shadow-x11 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp3-wayland · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | freerdp3-wayland 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| freerdp3-wayland · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp3-wayland 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| freerdp3-x11 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | freerdp3-x11 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| freerdp3-x11 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | freerdp3-x11 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libfreerdp-client3-3 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | libfreerdp-client3-3 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| libfreerdp-client3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libfreerdp-client3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libfreerdp-server-proxy3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libfreerdp-server-proxy3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libfreerdp-server3-3 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | libfreerdp-server3-3 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| libfreerdp-server3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libfreerdp-server3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libfreerdp-shadow-subsystem3-3 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | libfreerdp-shadow-subsystem3-3 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| libfreerdp-shadow-subsystem3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libfreerdp-shadow-subsystem3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libfreerdp-shadow3-3 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | libfreerdp-shadow3-3 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| libfreerdp-shadow3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libfreerdp-shadow3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libfreerdp3-3 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | libfreerdp3-3 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| libfreerdp3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libfreerdp3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libwinpr · almalinux 10 | 2:3.10.3-12.el10_2.13 | ALSA-2026:73979 | Sep 30, 2026 |
| libwinpr · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| libwinpr · ol 10 | 2:3.10.3-12.el10_2.13 | ELSA-2026-73979 | Sep 30, 2026 |
| libwinpr-debuginfo · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| libwinpr-devel · almalinux 10 | 2:3.10.3-12.el10_2.13 | ALSA-2026:73979 | Sep 30, 2026 |
| libwinpr-devel · amzn 2023 | 2:3.31.0-1.amzn2023 | ALAS2023-2026-2142 | Sep 14, 2026 |
| libwinpr-devel · ol 10 | 2:3.10.3-12.el10_2.13 | ELSA-2026-73979 | Sep 30, 2026 |
| libwinpr-tools3-3 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | libwinpr-tools3-3 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| libwinpr-tools3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libwinpr-tools3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| libwinpr3-3 · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | libwinpr3-3 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| libwinpr3-3 · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | libwinpr3-3 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| winpr-utils · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | winpr-utils 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
| winpr3-utils · Ubuntu 24.04.5 LTS (noble) | 3.31.0+dfsg-0ubuntu0.24.04.1 | winpr3-utils 3.31.0+dfsg-0ubuntu0.24.04.1 | Sep 14, 2026 |
| winpr3-utils · Ubuntu 26.04.1 LTS (resolute) | 3.31.0+dfsg-0ubuntu0.26.04.1 | winpr3-utils 3.31.0+dfsg-0ubuntu0.26.04.1 | Sep 15, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.