Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-64624

FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted files. Attackers can craft malicious RDP files with /rdp2tcp, /cert:ignore, or /drive options to execute arbitrary commands, bypass certificate validation, or expose local filesystems without user interaction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 8.9%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-64624


Contact Us

Shodan ® - All rights reserved