xrdp vulnerabilities and fixes

Recent CVEs affecting xrdp, with upgrade or downgrade steps. 10 tracked.

xrdp has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-07-20. Highest priority: CVE-2026-41252 (score 59/100).

• CVE-2026-41252 CRITICAL 9.8 UPGRADE xrdp is an open source RDP server
• CVE-2026-41521 HIGH 8.2 UPGRADE xrdp is an open source RDP server
• CVE-2026-44178 HIGH 8.8 UPGRADE xrdp is an open source RDP server
• CVE-2026-54538 HIGH 7.5 UPGRADE xrdp is an open source RDP server
• CVE-2026-55645 MEDIUM 6.5 UPGRADE xrdp is an open source RDP server
• CVE-2026-44978 MEDIUM 5.3 UPGRADE xrdp is an open source RDP server
• CVE-2026-55238 MEDIUM 5.3 UPGRADE xrdp is an open source RDP server
• CVE-2026-42218 MEDIUM 5.3 UPGRADE xrdp is an open source RDP server
• CVE-2026-55639 MEDIUM 5.3 UPGRADE xrdp is an open source RDP server
• CVE-2026-55626 HIGH 8.0 UPGRADE xrdp is an open source RDP server

FAQ

How do I fix xrdp vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is xrdp being exploited right now?

None of the tracked xrdp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which xrdp CVE should I patch first?

CVE-2026-41252 currently ranks highest (59/100): xrdp is an open source RDP server.

← Back to latest CVEs