{"affected":[{"defaultStatus":"unaffected","product":"FreeRDP","source":"CNA: VulnCheck","vendor":"FreeRDP","versions":[{"lessThan":"3.32.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"3.32.2","versionType":"semver"}]}],"cveId":"CVE-2026-121401","cwes":["CWE-476"],"description":"FreeRDP before 3.32.2 contains a denial of service vulnerability where rdg_process_packet dispatches a PKT_TYPE_EXTENDED_AUTH_MSG without verifying negotiated mode or auth context. A malicious or compromised RD Gateway can send the extended-auth packet before tunnel authentication, triggering a null-pointer dereference that crashes the client.","epss":null,"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m"}],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0"},{"score":4.3,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1793722098318,"publishedAt":1793716083991,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/freerdp-before-3.32.2-denial-of-service-via-rd-gateway-extended-auth-packet"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-8rjm-m7xg-mg6m"}],"remediation":[],"revision":"8d02d37797603ed80a6277297d40105952d871df6fee199c13061a9901dbef06","sources":[{"modifiedAt":1793722098318,"name":"CNA: VulnCheck","retrievedAt":1793725900934,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121401"}],"ssvc":{"assessedAt":1793722075379,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"FreeRDP before 3.32.2 Denial of Service via RD Gateway extended-auth packet","updatedAt":1793725900934}