CVE-2026-18358
Last modified
CVE-2026-18358 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. EPSS estimates a 0.43% chance of exploitation in the next 30 days.
Description
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | All versions |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-18358?
How severe is CVE-2026-18358?
How do I fix CVE-2026-18358?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-18344The Wp Responsive Thumbnail Slider plugin for WordPress is v…6.1
- CVE-2026-18348Missing authorization check in the upload_azure, upload_sftp…4.1
- CVE-2026-1835A vulnerability was identified in lcg0124 BootDo up to e93dd…4.3
- CVE-2026-18352The User Access Manager plugin for WordPress is vulnerable t…7.5
- CVE-2026-18353PIA's `POST /v1/upload/sbom` endpoint accepts a Bearer JWT a…8.8
- CVE-2026-18357The WPC Order Tip for WooCommerce WordPress plugin before 3.…7.5
- CVE-2026-18359Server-side request forgery in the METS and IIIF import URI …8.5
- CVE-2026-1836The system stores the username and password from the login f…5.3
- CVE-2026-18360The IRIS web application in version 2.4.26 and possibly othe…7.6
- CVE-2026-18361The IRIS web application in version 2.4.26 and possibly othe…7.6
- CVE-2026-18362The IRIS web application in version 2.4.26 and possibly othe…5.9
- CVE-2026-18363A logic vulnerability in the password reset token validation…9.1
Are you affected by CVE-2026-18358?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST