CVE-2026-110835 | FreeRDP up to 3.31.x Proxy http_proxy_connect msts injection

October 15, 2026 Yanac

A vulnerability, which was classified as critical, was found in FreeRDP up to 3.31.x. Affected is the function http_proxy_connect of the component Proxy. The manipulation of the argument msts results in injection.

This vulnerability was named CVE-2026-110835. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More