CVE-2026-121960
Undergoing Analysis Undergoing Analysis - In Progress

Denial of Service in FreeRDP via NLA Shadow Server

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: VulnCheck

Description
FreeRDP before 3.32.2 contains a denial of service vulnerability in the NLA-enabled shadow server when a CredSSP TSRequest omits negoTokens. Unauthenticated attackers can send a crafted seven-byte TSRequest containing only the version field to trigger a fatal WINPR_ASSERT and abort the server process.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-121960
EUVD
EUVD-2026-116960

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
FreeRDP FreeRDP 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-121960 is a denial of service vulnerability in FreeRDP versions up to 3.32.1 affecting NLA-enabled shadow servers. An unauthenticated attacker can send a crafted seven-byte TSRequest packet missing negoTokens to trigger a fatal assertion and crash the server process.

Detection Guidance

Monitor FreeRDP shadow server logs for fatal WINPR_ASSERT errors or process crashes. Use network traffic analysis tools like Wireshark to inspect CredSSP TSRequest packets for malformed seven-byte requests missing negoTokens. Check for unexpected server terminations in system logs.

Impact Analysis

This vulnerability allows unauthenticated attackers to crash FreeRDP shadow servers remotely, causing service disruption and downtime. It does not require credentials or user interaction, making it easy to exploit and potentially affecting availability of services relying on FreeRDP.

Mitigation Strategies

Upgrade FreeRDP to version 3.32.2 or later immediately. Disable NLA-enabled shadow server functionality if not required. Implement network-level protections to block malformed CredSSP TSRequest packets.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121960. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...