{"action":"Upgrade xrdp to 0.9.21.1-1+deb12u3 or later.","affected":[{"fixed":"0.9.21.1-1+deb12u3","introduced":"0"}],"component":"xrdp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["0.9.21.1-1+deb12u3"],"id":"tcs_01M5NRP0MBHWYFZYKBYF3A7SGQ","modified_at":"2026-10-27T09:47:37.371070023Z","published_at":"2026-04-17T20:16:33.517Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-32105","https://security-tracker.debian.org/tracker/CVE-2026-32105"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-32105","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-32105"}],"summary":"xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code (MAC) signature of encrypted RDP packets when using the \"Classic"}