{"id":"CVE-2026-96541","aliases":[],"cve":{"records":[{"id":"CVE-2026-96541","source":"redhat","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-23T12:16:46.357Z","published":"2026-09-23T18:08:23.661Z","modified":"2026-11-12T05:55:30.207Z"}],"publishers":[{"name":"redhat","role":"CNA","organizationId":"53f830b8-0a3f-465b-8143-3b8a9948e749","modified":"2026-11-12T05:55:30.207Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-11-03T22:23:39.175Z"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:98622","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:99125","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/errata/RHSA-2026:99136","tags":["vendor-advisory","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-96541","tags":["vdb-entry","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539385","tags":["issue-tracking","x_refsource_REDHAT"],"source":"redhat"},{"url":"https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356","tags":[],"source":"redhat"},{"url":"https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356","tags":["exploit"],"source":"CISA-ADP"}],"weaknesses":[{"id":"CWE-400","description":"Uncontrolled Resource Consumption","source":"redhat"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-14T03:59:26.711449Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Gnome-remote-desktop: gnome-remote-desktop: unauthenticated rdp sockets lack a handshake deadline","titleSource":"redhat","descriptionSource":"redhat","description":"A denial-of-service flaw was found in gnome-remote-desktop. An unauthenticated remote attacker can open RDP connections without completing the handshake and retain the connection-throttling slots indefinitely because no pre-authentication handshake deadline is enforced. By exhausting the global connection limit, an attacker can prevent new RDP clients from connecting until a holding socket is closed.","score":7.5,"severity":"high","published":"2026-09-23T18:08:23.661Z","modified":"2026-11-12T05:55:30.207Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10","platforms":[],"versions":[{"version":"0:49.3-18.el10_3","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux:10.3"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 10.2 Extended Update Support","platforms":[],"versions":[{"version":"0:49.3-5.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.2"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9.8 Extended Update Support","platforms":[],"versions":[{"version":"0:40.0-13.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"defaultStatus":"affected","cpes":["cpe:/a:redhat:rhel_eus:9.8::appstream"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 8","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:8"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"},{"vendor":"Red Hat","name":"Red Hat Enterprise Linux 9","platforms":[],"versions":[],"defaultStatus":"affected","cpes":["cpe:/a:redhat:enterprise_linux:9"],"source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"}],"remediation":[{"text":"Disable the RDP listener when it is not required, or restrict access to the RDP port to trusted networks or hosts at the network boundary. No application-level mitigation that preserves unrestricted RDP access is known.","source":"redhat","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"}],"references":["https://access.redhat.com/errata/RHSA-2026:98622","https://access.redhat.com/errata/RHSA-2026:99125","https://access.redhat.com/errata/RHSA-2026:99136","https://access.redhat.com/security/cve/CVE-2026-96541","https://bugzilla.redhat.com/show_bug.cgi?id=2539385","https://gitlab.gnome.org/GNOME/gnome-remote-desktop/-/issues/356"],"sources":[{"name":"CVE","id":"CVE-2026-96541","modified":"2026-11-12T05:55:30.207Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"}],"assessments":[{"source":"redhat","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","score":7.5}],"sourceAffected":[],"observedAt":"2026-11-12T06:00:12.815Z","kev":{"status":"not-listed","checkedAt":"2026-11-15T00:10:33.488Z"},"coverage":[{"source":"NVD","status":"available","checkedAt":"2026-11-04T12:00:49.976Z","attemptedAt":"2026-11-04T12:00:49.976Z"},{"source":"GHSA","status":"available","checkedAt":"2026-11-04T12:00:38.470Z","attemptedAt":"2026-11-04T12:00:38.470Z"},{"source":"EUVD","status":"available","checkedAt":"2026-11-04T12:00:36.631Z","attemptedAt":"2026-11-04T12:00:36.631Z"},{"source":"EPSS","status":"available","checkedAt":"2026-11-04T12:00:34.916Z","attemptedAt":"2026-11-04T12:00:34.916Z"}],"evidence":[{"source":"FIRST EPSS","id":"CVE-2026-96541","url":"https://www.first.org/epss/","probability":0.00913,"percentile":0.60095,"date":"2026-11-03","checkedAt":"2026-11-04T12:00:34.916Z"},{"source":"ENISA EUVD","id":"EUVD-2026-85525","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-85525","modified":"Nov 3, 2026, 10:23:39 PM","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-04T12:00:36.631Z"},{"source":"GitHub Advisory Database","id":"GHSA-gv4j-r8qw-8qpc","url":"https://github.com/advisories/GHSA-gv4j-r8qw-8qpc","modified":"2026-09-23T21:30:53Z","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-04T12:00:38.470Z"},{"source":"NVD","id":"CVE-2026-96541","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96541","modified":"2026-11-03T23:18:00.723","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","checkedAt":"2026-11-04T12:00:49.976Z"}],"aiSummary":{"text":"Gnome-remote-desktop has a denial-of-service flaw where an unauthenticated remote attacker can open RDP connections without completing the handshake. The attacker can exhaust the global connection limit, preventing new RDP clients from connecting. Affected versions are not explicitly stated.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-12T06:01:07.175Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-96541"}]}}