{"action":"Upgrade xrdp to 0.10.1-3.1+deb13u2 or later.","affected":[{"fixed":"0.10.1-3.1+deb13u2","introduced":"0"}],"component":"xrdp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":["0.10.1-3.1+deb13u2"],"id":"tcs_01M5NRP0QP9FPGPPBDVZKS76QQ","modified_at":"2026-10-01T03:03:10.154697509Z","published_at":"2026-04-17T20:16:33.517Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-32105","https://security-tracker.debian.org/tracker/CVE-2026-32105"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-32105#Debian:13/xrdp","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-32105"}],"summary":"xrdp is an open source RDP server. In versions through 0.10.5, xrdp does not implement verification for the Message Authentication Code (MAC) signature of encrypted RDP packets when using the \"Classic"}