CVE-2026-18358High· 7.5▾ TwilightA flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated r…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. When the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. This can accumulate accepted sockets and pending routing-token operations until timeout, exhausting resources and preventing legitimate users from establishing RDP sessions. This issue does not affect the upstream version.
gnome-remote-desktopgnome-remote-desktop (all versions)gnome-remote-desktop (all versions)gnome-remote-desktopgnome-remote-desktopRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
If system-mode RDP is not required, disable it. If it must remain enabled, restrict the RDP listener (default port 3389) to trusted hosts or management networks using host-based firewall rules.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-96541High· 7.5A denial-of-service flaw was found in gnome-remote-desktop
CVE-2023-32665Medium· 5.5A flaw was found in GLib
CVE-2023-32636Medium· 4.7A flaw was found in glib, where the gvariant deserialization code is vulnerable to a denial of service introduced by additional input validation added to resolve CVE-2023-29499
CVE-2023-29499Medium· 5.5A flaw was found in GLib
CVE-2026-109833Medium· 5.9A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux
CVE-2023-32611Medium· 5.5A flaw was found in GLib