CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-18358: gnome-remote-desktop (exact versions not specified); +4 more affected products

CVE-2026-18358. CVSS 3.1 base score 7.5 (HIGH, Vendor/CNA). EPSS 0.00522 (percentile 0.43153), scored 20-Oct-2026.

Affected technology

gnome-remote-desktop · Exact affected versions not specified by the source
GNOME

Red Hat Enterprise Linux 10 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 10.0 Extended Update Support · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 8 · Exact affected versions not specified by the source
Red Hat

Red Hat Enterprise Linux 9 · Exact affected versions not specified by the source
Red Hat

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

The source says when the daemon is running in system mode with RDP enabled, the incoming connection handler bypasses the connection throttler, allowing an unauthenticated remote attacker to open many parallel pre-authentication connections to the RDP listener. Vendor/CNA’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high.

Published

CWE
CWE-400
CCR priority
30.1 /100 (P4)
CVSS 3.1
7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · Vendor/CNA
EPSS
0.00522 · percentile 0.43153 · 2026-10-20
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-18358.html