CVE-2026-91949
CRITICALCVSS 9.3Description
FreeRDP server versions before 3.31.0 contain a protocol negotiation bypass vulnerability that allows unauthenticated attackers to establish RDSTLS connections despite server policy disabling them. Attackers can send incompatible protocol requests, receive negotiation failures, then complete TLS handshake and enter RDSTLS to bypass pre-authentication transport restrictions.
Timeline
Published:September 15th, 2026 4:17 PM
Last modified:September 24th, 2026 12:14 PM
CVSS Scoring
CVSS v3: 9.3 (CRITICAL)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
Affected Software
From NVD CPE configuration data
Vendors
freerdp
Products
freerdp
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute