CVE-2026-55194 | FreeRDP up to 3.26.9 RPC Client rpc_client.c rpc_client_recv_fragment heap-based overflow

August 19, 2026 Yanac

A vulnerability, which was classified as critical, was found in FreeRDP up to 3.26.9. Affected by this issue is the function rpc_client_recv_fragment of the file libfreerdp/core/gateway/rpc_client.c of the component RPC Client. Executing a manipulation can lead to heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-55194. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More