{"action":"Upgrade xrdp to 0.10.6.1-2 or later.","affected":[{"fixed":"0.10.6.1-2","introduced":"0"}],"component":"xrdp","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["0.10.6.1-2"],"id":"tcs_01M5NT0FM16S55CKHSAVQT3D49","modified_at":"2026-10-25T09:47:38.343960602Z","published_at":"2026-07-20T18:16:54.150Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2026-55626","https://security-tracker.debian.org/tracker/CVE-2026-55626"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2026-55626","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-55626"}],"summary":"xrdp is an open source RDP server. In versions 0.10.6 and prior, when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, the Xvnc process is launched with in"}