CVE-2026-73241
- Source
- https://cve.org/CVERecord?id=CVE-2026-73241
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73241.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-73241
- Aliases
-
- CVE-2026-72746
- GHSA-rqgv-grx4-xm6x
- Downstream
- Published
- 2026-08-11T19:47:27.859Z
- Modified
- 2026-08-15T16:52:33.274905Z
- Severity
-
- 8.3 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)
- Details
-
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLSTYPECAPABILITIES PDU while rdstlsserverauthenticate is waiting for RDSTLSTYPEAUTHREQ, leaving resultCode at RDSTLSRESULTSUCCESS and allowing a remote unauthenticated client to bypass the RedirectionGuid, username, domain, or password checks. This issue is fixed in version 3.30.0.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73241.json", "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-287" ] }- References
-
- https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73241.json
- https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rqgv-grx4-xm6x
- https://nvd.nist.gov/vuln/detail/CVE-2026-73241
- https://github.com/FreeRDP/FreeRDP/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695
- https://github.com/FreeRDP/FreeRDP/pull/13065
Affected packages
Git / github.com/freerdp/freerdp
Affected versions
1.*
1.0-beta1
1.0-beta2
1.0-beta4
1.0-beta5
1.0.0
1.0.1
1.1.0-beta+2013071101
1.1.0-beta1
1.1.0-beta1+android2
1.1.0-beta1+android3
1.1.0-beta1+android4
1.1.0-beta1+android5
1.1.0-beta1+ios1
1.1.0-beta1+ios2
1.1.0-beta1+ios3
1.1.0-beta1+ios4
1.2.0-beta1+android7
1.2.0-beta1+android9
2.*
2.0.0
2.0.0-beta1+android10
2.0.0-beta1+android11
2.0.0-rc0
2.0.0-rc1
2.0.0-rc2
2.0.0-rc3
2.0.0-rc4
3.*
3.0.0
3.0.0-beta1
3.0.0-beta2
3.0.0-beta3
3.0.0-beta4
3.0.0-rc0
3.1.0
3.2.0
3.3.0
3.4.0
3.5.0
3.5.1
Database specific
vanir_signatures
[
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 695.0,
"function_hash": "155764754887372443645945601388896089226"
},
"id": "CVE-2026-73241-153c3f57",
"target": {
"function": "rdstls_process_authentication_request",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 711.0,
"function_hash": "159131018979659257881293875550322023774"
},
"id": "CVE-2026-73241-2286d4ed",
"target": {
"function": "rdstls_process_capabilities",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 446.0,
"function_hash": "117152418859003445647467143718740173676"
},
"id": "CVE-2026-73241-2fed2019",
"target": {
"function": "rdstls_write_cookie",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 256.0,
"function_hash": "29963599468883388771391786244828980873"
},
"id": "CVE-2026-73241-30906394",
"target": {
"function": "rdstls_write_capabilities",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1429.0,
"function_hash": "200166202680361482409765775391937341882"
},
"id": "CVE-2026-73241-323a0463",
"target": {
"function": "rdstls_process_authentication_request_with_password",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 274.0,
"function_hash": "303194929162746364221872652853517324119"
},
"id": "CVE-2026-73241-430046d1",
"target": {
"function": "rdstls_write_authentication_response",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 332.0,
"function_hash": "84637662901415291889913429197340539435"
},
"id": "CVE-2026-73241-53712944",
"target": {
"function": "rdstls_server_authenticate",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 747.0,
"function_hash": "33158993581674312952628998781492534008"
},
"id": "CVE-2026-73241-5666a12e",
"target": {
"function": "rdstls_write_authentication_request_with_password",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1599.0,
"function_hash": "232090212050999299895611742282617480546"
},
"id": "CVE-2026-73241-57b4a9c6",
"target": {
"function": "rdstls_process_authentication_response",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 424.0,
"function_hash": "315778650729036312669768859659703298059"
},
"id": "CVE-2026-73241-582c5a68",
"target": {
"function": "rdstls_new",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1062.0,
"function_hash": "291305330822727455348324876806199522521"
},
"id": "CVE-2026-73241-6724eac9",
"target": {
"function": "rdstls_write_authentication_request_with_fedauth_token",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 246.0,
"function_hash": "121402639258118979922728833553287373108"
},
"id": "CVE-2026-73241-755d4879",
"target": {
"function": "rdstls_client_authenticate",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1403.0,
"function_hash": "228985778033473482141178569107385534696"
},
"id": "CVE-2026-73241-782e7c3e",
"target": {
"function": "rdstls_send",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 503.0,
"function_hash": "233960090202537699130297827915343078"
},
"id": "CVE-2026-73241-7c6fa8e0",
"target": {
"function": "rdstls_recv_authentication_request",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 524.0,
"function_hash": "163948979939337534355873381221992468041"
},
"id": "CVE-2026-73241-803941c0",
"target": {
"function": "rdstls_write_authentication_request_with_cookie",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 506.0,
"function_hash": "334703327781800504867145195913986884726"
},
"id": "CVE-2026-73241-81a7b0ff",
"target": {
"function": "rdstls_recv_capabilities",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"96513384846763882195435795071255066243",
"12051641781424030996942366023590381830",
"165497125843735573434629985562367925940",
"164160029332579516134925184990247145964"
],
"threshold": 0.9
},
"id": "CVE-2026-73241-842fa555",
"target": {
"file": "libfreerdp/core/rdstls.h"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 1092.0,
"function_hash": "240951509522145007108722694151579715726"
},
"id": "CVE-2026-73241-897c36ed",
"target": {
"function": "rdstls_parse_pdu_data_type",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 808.0,
"function_hash": "65950475401181426463976279646834482634"
},
"id": "CVE-2026-73241-8ed0a2c2",
"target": {
"function": "rdstls_parse_pdu",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 384.0,
"function_hash": "24811187219285881625362907775124558551"
},
"id": "CVE-2026-73241-990bf2a6",
"target": {
"function": "rdstls_send_authentication_request",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 408.0,
"function_hash": "231628712199204219219758796812141473923"
},
"id": "CVE-2026-73241-a7b6d754",
"target": {
"function": "rdstls_read_unicode_string",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 387.0,
"function_hash": "339970384538488709229707997518183297801"
},
"id": "CVE-2026-73241-aa083a3a",
"target": {
"function": "rdstls_send_capabilities",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 923.0,
"function_hash": "312220230583537417657080721076708065962"
},
"id": "CVE-2026-73241-b567f7f6",
"target": {
"function": "rdstls_recv",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Line",
"deprecated": false,
"digest": {
"line_hashes": [
"155128083764624727570969839125296075312",
"142026452823781443010593151791238347847",
"256320413540139761792726827228391485875",
"190502710021097392252045497461825215906",
"209639384356197742098046505906181746365",
"242088765465756386659751085990779156255",
"307298373179850406744818456527548024484",
"317163298986385743965498110912944271899",
"286799597488114402982048842724901608547",
"41738939449028447106739395515375952145",
"74087228232165059723830405322580274245",
"226648320483175311692997674201269133946",
"311100817215807159187691403129357744252",
"100144166837669364512192836357626376763",
"63792765568580056179163103884180470483",
"243963676460623653154083742071998164648",
"119551679384851114196764630829041258753",
"153405421872193207990752309092560073935",
"278909186074132800432698082282382896590",
"15671858518546051546629668135058565990",
"35893545873239325762721256415289956814",
"138544246895320808400161296851545590173",
"185968746974941455511709189241712145614",
"222145706692804542376450807748179703430",
"114130619081363570523106887814773720393",
"185188502198700596293241853676074344917",
"141145949174673826279091874494441798883",
"262161161847737857941832974830041987470",
"71129972314255527767186607908951445981",
"59864637492938493793108509474305013757",
"124494740253876515552731677136552778821",
"21727714648732686667622563158779814011",
"211228816995103232581232033273353845266",
"311141460546665712174500012286366051967",
"164080567905533005842848281889882418674",
"148888679744364907914547684734664133430",
"10600956284264857335265537139443269803",
"125245703122217386897736126749395698467",
"137308419511180092251939623962299178082",
"218883128307939359184171681332820875377",
"127988859291043424237086806974356820642",
"273045288067284447485830817999573773093",
"84267773112134564364784139797492642852",
"266811542517968972688105136916838193987",
"51557254338563345509524072971027585032",
"278629680089223669178801647234753244634",
"200255792769210089207043871487905114675",
"269054451925850607323300558306367384860",
"314010443235059495749615152791628949019",
"26067837072021538579904022230730788307",
"46111710266238738795524302026193695817",
"129324000800897680348176127464557342340",
"175418508351932444985153476227645137711",
"318176473707978992031575995510273483160",
"318996573657594525047767501473900122954",
"46211120672597080716100674419646891264",
"38896604067955582334320845613872211911",
"5734141728892600123696259190261616247",
"244235179224717275911023519357483215257",
"86938719147560143984845906381202175285",
"179551716908883155707035358896412047360",
"188576995248430660190943603585075032406",
"21963058621268847919325162034529991532",
"98569008745321922082888928458648851277",
"335640257331471671116131531193630502632",
"50691212394757140008105375687035234070",
"226099829169479940717622351394710274650",
"160274570462055782043196777638640100152",
"122288820319781581153366108745708685908",
"132701505626212827615922283800117662406",
"171658566457065442672049333622284216904",
"172742225733235458305244306200646544906",
"209227075584005240472791885485795569645",
"110119589199323040428253607555282362471",
"21554304094996571748664556052866655744",
"87081589289509689119060908190386298210",
"192274493397872807890494022170637354326",
"340271110228997574010985008395996200524",
"254074147727273573941121635195930942394",
"3047320685141525316432519853806680432",
"250908534489895776868007861348129143952",
"52509445888919386400655368826512866328",
"23307830390476342700377342266690151047",
"78276825763352885414280165663584258337",
"124449886990354933921121775364730053009",
"220136830377411391474267921429386800810",
"98881477273503610624199393325563527624",
"105135349804760838859480469610730392589",
"26274561640879368128556264350392685464",
"168097022942206300824952078901411024807",
"136080850638218547994855471482801926102",
"33248538891717922972968589203986299605",
"208295258912040602656491374917973565056",
"337558804444690708063816623677212780666",
"276844150374022186426661713848622185875",
"279389415282046494387182337776244381827",
"173369288335438682889981120101357918382",
"9542569219337572000600842033140286238",
"271286839271674372433382809877629296710",
"79969316557965529317788484841649823096",
"297134648793052698226006801233712997142",
"66339467018854743531480353130863303624",
"8221953189601722337768983025140823939",
"175719187590312911399775832717247477535",
"236271571639305973267778767052496902357",
"275666634967472612575414304488211932253",
"12349533118170723250236854922075399680",
"310207373135482884558950552997721692586",
"219963682192448664061767494209506837275",
"220731672327580888729709894724753189364",
"128112414200092161996504074551011938586",
"162457891831631328216661150593414012360",
"282621901268003374381021287229572283781",
"111553076056513399592686527584588521584",
"77963492344522401504911365356639765233",
"79397658925979584152759316914561858061",
"217689733756302869928151104980022941069",
"308059919503845790278778368185805939156",
"6424434202352660321519869138003947293",
"180699139841776452475062246599998866390",
"29295749134112526966591919860736441771",
"84444226755379042315023196681988888899",
"46587471684125606893486072332533668539",
"20535522865750565510243848547986359170",
"98395859861089559917950523553255697843",
"80071314523501115963552454401519180218",
"179533507747346131913784076369014960090",
"2928776452200006292929310634320039104",
"21226909479970390739288915492305016255",
"46373195669931144059407593078815830911",
"123228794463908980139816109811884264138",
"284626271855728327122229407036839889964",
"3744244909522878763052903177337547261",
"86907958693045194455982728523196592184",
"224268714210591906207539297983554453315",
"23902182464198869944356035608993019980",
"276590694668060066152714386460802348588",
"131703022105069002297193389580543612555",
"19689648744352491163226034162864574919",
"275756422132930576412575768258856170291",
"36874496110308780079577403583725749128",
"110370435056457304931595381157907583241",
"32906577531104069441971254211959170452",
"23062003975519623990645013737278292769",
"238187122860979510713017900435627373267",
"86802059818029460442778303975885493367",
"80212760306461470983817765669465730405",
"117877083035966421146658146012056523214",
"1418254385695731109753410080551500930",
"336020746761767799925429693641686657202",
"267979792412503510024175493626857401640",
"114281582028010136823531589013476620611",
"39308804105358441976722066064644288141",
"89916242973255547560857857649345662650",
"283559100929580582231333172263230473954",
"107559760757761293967788261899529557821",
"20177849134506165193234951902321074166",
"61418062250270560226298014151215907906",
"74709977758696233189799803305038429513",
"271504508617968085905384753169885032979",
"67541508851473492888021831435189789597",
"79665404768485922805105299820064004431",
"70420042286990198223238146899926488611",
"327688692119686422816970155525685234868",
"218105167240884640424648241542882171513",
"61687140946887187464249936590192021149",
"147121415044535665618646026466938398235",
"322420355997578166932495691628778991842",
"143960399318839506002367125396998976510",
"177127460050614935447531550672308801325",
"105541773892090896267189505588712967943",
"17125251316418672658221284959373475292",
"261851875043843078569574811850091030041",
"332270643224430247310144051454885671277",
"132495408268578844483055551047245692082",
"37123263312133608723055587561393421303",
"18761104464292724317960725224154226604",
"160661021183552777426083631098665667521",
"157918414472960572200301933200231240069",
"35422355427190040971063676316903509455",
"11091537354088784345481623749583970080",
"11807671448220147328085383041897086495",
"27940449535390636504791313076939858552",
"232414625245332630381079093333825022968",
"251446212591022107246273591242738725046",
"147381902721946073251737343609080820546",
"294994372552998649072486573453151133654",
"305409098144489412097085403687735955863",
"116335736011954949746052702088023975209",
"196256070791749225490759318692862219247",
"331045054249352285495780190931172120675",
"130586631922119333519854700620671053005",
"80330027199913740852812245854448102929",
"300061631197680494567709538155699135659",
"241144006775696836227799524834828723259",
"264557889781177023844883968120917961904",
"199691586646589612820415568579376509418",
"274833108901968272766485201336894302510",
"90824759767575422037050810503692510255",
"183476781791938096625725232247611359736",
"187307719091958707046234199274268168002",
"7351761415300398744843746699154956669",
"185369354020258472419248218982033030494",
"116073642277352865751558864205827594033",
"301715161986455396617736213646997807156",
"306101543781167872614586025612716436912",
"208548113609199993444799689166804804598",
"88142079370470235025535543856684107734",
"168027407852583672086948697053114064190",
"181412496576067349280480948368901640249",
"130532331088465921104296624171215926375",
"225623652277968178988436973653216407803",
"3883217670893876691241269306695795011",
"272894543856491739576587487823313567996",
"207950151926376358536030805698740886514",
"265538573126316347860033985072302059647",
"69342393469729137036617890296547553246",
"127155381179294174651838731731776969620",
"85257359514100897542765036031969472128",
"68930551501546791443526498684520215331",
"106801351245908866476548959299980933683",
"12035205531620744062474283567832058868",
"236433681237888015520716335234652963299",
"72642661837093908470919226892977372820",
"231048170699627891973702596125553967939",
"162735426941123411678266180117270099457",
"189187553166279663038686166582015814068",
"269238050412219478509402183780295213601",
"17203024303799329337437043554238105844",
"232786120738303140408852380482748613555",
"64027868562455505075668207477456442452",
"331555899962050324433224275498286278132",
"32744831993876411314895981978233168569",
"182547779437152824856154438370787274709",
"271705306062335767091941725131936001270",
"110979123348951632785670069350416841976",
"264926182915734870388419359227474138311",
"119666189256789368179743149695703259178",
"132132227208554973571231004312232931537",
"82694627131184174689455449277054980496",
"274861639910583632594131864029637947660",
"204551649837956030259913953799145989561",
"43425641103644655887180880214818059531",
"309695734538658744567169453514295370384",
"62679489325008041842865564045954411745",
"264255918474661559219721839905896493185",
"302229851243488261359776873917479022974",
"153109379333006019164439041076950500872",
"306825068297494532414238597821660280022",
"206294646297781371725451147818940199469",
"99647409435839532872523244092633513033",
"130772259808607924376092594863206184978",
"71150435925942412209631069572923662827",
"216728632316079590886400962296709227402",
"182763750737385472034118990054400153825",
"19352183118880618526414351847169042909",
"330162264197632864884739563887511363498",
"309344387705112322967771414765319594480",
"307865502407202928214062545722168016825",
"37744866079491907252297990716730666363",
"159618757123732409087788596033913832286",
"108048753174149484957983265639824121202",
"173029626365844875769005359313273267193",
"326676452373896343355929990049221900725",
"194102104490808781816437953826633371176",
"81815947219662378998242735518716201604",
"106385679193204059201141484562865338586",
"161856008297430333874953417483138226153",
"126514473319451148008860351800741009527",
"14118477262820930891418239326286000913",
"33577877435311541539939415324166568195",
"279376753567963553199497498870101981740",
"97160172369782084370821171451362809410",
"24931441753929560756825210206907059321",
"221937207217018487866533718760181855",
"76206314120833759019671479301910591155",
"10129430350921474121712872821518433597",
"261498562478656347396546646539604902596",
"187863886907563729651910571578694819251",
"331543887342309358183581258391391796660",
"222736578488831114058998735116176625346",
"326502352139085212533860800976342091066",
"249265171199079211022026766019378921042",
"138251069712449222360777599363025811498",
"70502326881585920256288128656999910050",
"101933435801961699327316920490646614215",
"300849492847748438754612587549939850582",
"295007900307702228678140538226563026560",
"81815947219662378998242735518716201604",
"106385679193204059201141484562865338586",
"161856008297430333874953417483138226153",
"185025942810121518782104886935155131670",
"18004248208922438567098724372819606716",
"251908380142230562210251607408014550362",
"186788787604926425893795677913285815420",
"137907564390974238160668923503072040908",
"349626048862652641911168553037473353",
"326676452373896343355929990049221900725",
"194102104490808781816437953826633371176",
"10129430350921474121712872821518433597",
"261498562478656347396546646539604902596",
"187863886907563729651910571578694819251",
"331543887342309358183581258391391796660",
"222736578488831114058998735116176625346",
"88533000411968470569917989089358899174",
"258315070481015897463711901427950927352",
"133107699954147075939500781398986183931",
"169093947901663381741965568837107238493",
"26756363391079105876186930488354329063",
"221937207217018487866533718760181855",
"76206314120833759019671479301910591155",
"174147167739242662662325325395383182049",
"106385679193204059201141484562865338586",
"161856008297430333874953417483138226153",
"213361043212864473519468554583326180045",
"40803789063580408466760900335165414024",
"295493603414020261567843791661857736803",
"76078660640598121720436879185540674290",
"31777459286823208004242084073409262366",
"141783495987509501973297282894087711317",
"241152913241003547055268395824753321005",
"86895604944597156058063179081735690880",
"240638260357473835320990671602045859280",
"10129430350921474121712872821518433597",
"261498562478656347396546646539604902596",
"187863886907563729651910571578694819251",
"331543887342309358183581258391391796660",
"222736578488831114058998735116176625346",
"150577647152064069428810422862511084193",
"215125381782208901764462330006290718693",
"291211213805650502153197706115522115352",
"333948039614429712220302776362038795042",
"266045764514427169940455706263819459211",
"125453778506154893860565851297785204997",
"46357775455307028078949233618945139353",
"112758144486892548801641743337860902148",
"327906669378573180732218216368470394259",
"288716469121652658644986057102592118607",
"307483868995088038721580527432088455271",
"211385707274910231485895941148526823546",
"234200873137844919479483856424286064962",
"110623467544849586985293016819298305544",
"175244866950796266385166532495913576571",
"260642422226724666313666302515308795414",
"116106611198423001415713349181350507357",
"146319980503252590630452796899256952181",
"262078489246147790231080515357112379499",
"97243882055193546934391458444004379909",
"149207589168904868985494873638276021326",
"55145622405164596246662034587248131665",
"310430951977019026711361972093255830929",
"246201184165324882277524943712752215724",
"60769262350954905500959108901161974661",
"45575905438806842081161898255107177912",
"158189152782542295232204050435659287094",
"148125449456123866146523772033911174742",
"45735053068238751275341587714072169276",
"298603844974194396067388115147023510197",
"194254173655912489746278394743795036459",
"29225307589876400137866839009366125144",
"206467515435638883414254038702088425299",
"88332677559666613721326653420260245128",
"319106426102027952394286740462548946769",
"54769561999622905009024085458674370621",
"176765822719684591196160776951587514674",
"321148046276199989399655065914140541158",
"231316614144103686063345968432504250969",
"255918188249974329755199860232328093051",
"160582181340902748646945448644680740857",
"68941541487294786493601612345909436971",
"337080887684049738416829714672253484375",
"160295658746160886675393218135158789852",
"325275910650956630089520070724815051262",
"171026489662924829003327564459054234658",
"144012319823218180708152564121588003739",
"149086985213099347259688533714218462646",
"169817829002772959224715116646326491064",
"260098362017696852684436370394853622013"
],
"threshold": 0.9
},
"id": "CVE-2026-73241-cd10d833",
"target": {
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 499.0,
"function_hash": "61484004935694442737948472813653789411"
},
"id": "CVE-2026-73241-d005b8bc",
"target": {
"function": "rdstls_recv_authentication_response",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 170.0,
"function_hash": "273666884238746818107833787441566006597"
},
"id": "CVE-2026-73241-e5248ef7",
"target": {
"function": "rdstls_process_authentication_request_with_cookie",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
},
{
"signature_type": "Function",
"deprecated": false,
"digest": {
"length": 380.0,
"function_hash": "141704580816610505551292455720888532250"
},
"id": "CVE-2026-73241-ecf0dcbb",
"target": {
"function": "rdstls_send_authentication_response",
"file": "libfreerdp/core/rdstls.c"
},
"source": "https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695",
"signature_version": "v1"
}
]
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73241.json"
vanir_signatures_modified
"2026-08-15T16:52:33Z"