{"id":"CVE-2026-73241","summary":"FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities PDU is accepted at the auth step (fail-open `resultCode`)","details":"FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c accepts an attacker-supplied RDSTLS_TYPE_CAPABILITIES PDU while rdstls_server_authenticate is waiting for RDSTLS_TYPE_AUTHREQ, leaving resultCode at RDSTLS_RESULT_SUCCESS and allowing a remote unauthenticated client to bypass the RedirectionGuid, username, domain, or password checks. This issue is fixed in version 3.30.0.","aliases":["CVE-2026-72746","GHSA-rqgv-grx4-xm6x"],"modified":"2026-08-13T08:06:43.239868Z","published":"2026-08-11T19:47:27.859Z","database_specific":{"cwe_ids":["CWE-287"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73241.json","cna_assigner":"GitHub_M"},"references":[{"type":"WEB","url":"https://github.com/FreeRDP/FreeRDP/releases/tag/3.30.0"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/73xxx/CVE-2026-73241.json"},{"type":"ADVISORY","url":"https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-rqgv-grx4-xm6x"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-73241"},{"type":"FIX","url":"https://github.com/FreeRDP/FreeRDP/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695"},{"type":"FIX","url":"https://github.com/FreeRDP/FreeRDP/pull/13065"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/freerdp/freerdp","events":[{"introduced":"0"},{"fixed":"b05a9510787c83c87ffc5fa8d7cc9f06ed971695"},{"fixed":"6b107f0aadbabc47941c5a5b893b88c01792af6d"}],"database_specific":{"source":["AFFECTED_FIELD","REFERENCES"],"extracted_events":[{"introduced":"0"},{"fixed":"3.30.0"}]}}],"versions":["3.5.1","3.5.0","3.4.0","3.3.0","3.2.0","3.1.0","3.0.0","3.0.0-rc0","3.0.0-beta4","3.0.0-beta3","3.0.0-beta2","3.0.0-beta1","2.0.0","2.0.0-rc4","2.0.0-rc3","2.0.0-rc2","2.0.0-rc1","2.0.0-rc0","2.0.0-beta1+android11","2.0.0-beta1+android10","1.2.0-beta1+android9","1.2.0-beta1+android7","1.1.0-beta+2013071101","1.1.0-beta1+ios4","1.1.0-beta1+android5","1.1.0-beta1+android4","1.1.0-beta1+ios3","1.1.0-beta1+ios2","1.1.0-beta1+android3","1.1.0-beta1+android2","1.1.0-beta1+ios1","1.1.0-beta1","1.0.1","1.0.0","1.0-beta5","1.0-beta4","1.0-beta2","1.0-beta1"],"database_specific":{"vanir_signatures_modified":"2026-08-13T08:06:43Z","vanir_signatures":[{"source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_process_authentication_request"},"deprecated":false,"digest":{"function_hash":"155764754887372443645945601388896089226","length":695},"id":"CVE-2026-73241-153c3f57","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"159131018979659257881293875550322023774","length":711},"id":"CVE-2026-73241-2286d4ed","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_process_capabilities"}},{"source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_write_cookie"},"deprecated":false,"digest":{"function_hash":"117152418859003445647467143718740173676","length":446},"id":"CVE-2026-73241-2fed2019","signature_type":"Function","signature_version":"v1"},{"digest":{"function_hash":"29963599468883388771391786244828980873","length":256},"id":"CVE-2026-73241-30906394","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_write_capabilities"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_process_authentication_request_with_password"},"deprecated":false,"digest":{"length":1429,"function_hash":"200166202680361482409765775391937341882"},"id":"CVE-2026-73241-323a0463","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_write_authentication_response"},"deprecated":false,"digest":{"function_hash":"303194929162746364221872652853517324119","length":274},"id":"CVE-2026-73241-430046d1"},{"deprecated":false,"digest":{"function_hash":"84637662901415291889913429197340539435","length":332},"id":"CVE-2026-73241-53712944","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"function":"rdstls_server_authenticate","file":"libfreerdp/core/rdstls.c"}},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_write_authentication_request_with_password"},"deprecated":false,"digest":{"function_hash":"33158993581674312952628998781492534008","length":747},"id":"CVE-2026-73241-5666a12e","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_process_authentication_response"},"deprecated":false,"digest":{"function_hash":"232090212050999299895611742282617480546","length":1599},"id":"CVE-2026-73241-57b4a9c6"},{"source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_new"},"deprecated":false,"digest":{"function_hash":"315778650729036312669768859659703298059","length":424},"id":"CVE-2026-73241-582c5a68","signature_type":"Function","signature_version":"v1"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"function":"rdstls_write_authentication_request_with_fedauth_token","file":"libfreerdp/core/rdstls.c"},"deprecated":false,"digest":{"function_hash":"291305330822727455348324876806199522521","length":1062},"id":"CVE-2026-73241-6724eac9"},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"function":"rdstls_client_authenticate","file":"libfreerdp/core/rdstls.c"},"deprecated":false,"digest":{"function_hash":"121402639258118979922728833553287373108","length":246},"id":"CVE-2026-73241-755d4879","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_send"},"deprecated":false,"digest":{"function_hash":"228985778033473482141178569107385534696","length":1403},"id":"CVE-2026-73241-782e7c3e","signature_type":"Function"},{"target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_recv_authentication_request"},"deprecated":false,"digest":{"length":503,"function_hash":"233960090202537699130297827915343078"},"id":"CVE-2026-73241-7c6fa8e0","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695"},{"digest":{"function_hash":"163948979939337534355873381221992468041","length":524},"id":"CVE-2026-73241-803941c0","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_write_authentication_request_with_cookie"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_recv_capabilities"},"deprecated":false,"digest":{"length":506,"function_hash":"334703327781800504867145195913986884726"},"id":"CVE-2026-73241-81a7b0ff","signature_type":"Function"},{"id":"CVE-2026-73241-842fa555","signature_type":"Line","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.h"},"deprecated":false,"digest":{"line_hashes":["96513384846763882195435795071255066243","12051641781424030996942366023590381830","165497125843735573434629985562367925940","164160029332579516134925184990247145964"],"threshold":0.9}},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_parse_pdu_data_type"},"deprecated":false,"digest":{"length":1092,"function_hash":"240951509522145007108722694151579715726"},"id":"CVE-2026-73241-897c36ed","signature_type":"Function"},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"function":"rdstls_parse_pdu","file":"libfreerdp/core/rdstls.c"},"deprecated":false,"digest":{"function_hash":"65950475401181426463976279646834482634","length":808},"id":"CVE-2026-73241-8ed0a2c2"},{"deprecated":false,"digest":{"length":384,"function_hash":"24811187219285881625362907775124558551"},"id":"CVE-2026-73241-990bf2a6","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_send_authentication_request"}},{"digest":{"function_hash":"231628712199204219219758796812141473923","length":408},"id":"CVE-2026-73241-a7b6d754","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_read_unicode_string"},"deprecated":false},{"digest":{"function_hash":"339970384538488709229707997518183297801","length":387},"id":"CVE-2026-73241-aa083a3a","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_send_capabilities"},"deprecated":false},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_recv"},"deprecated":false,"digest":{"function_hash":"312220230583537417657080721076708065962","length":923},"id":"CVE-2026-73241-b567f7f6"},{"signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c"},"deprecated":false,"digest":{"line_hashes":["155128083764624727570969839125296075312","142026452823781443010593151791238347847","256320413540139761792726827228391485875","190502710021097392252045497461825215906","209639384356197742098046505906181746365","242088765465756386659751085990779156255","307298373179850406744818456527548024484","317163298986385743965498110912944271899","286799597488114402982048842724901608547","41738939449028447106739395515375952145","74087228232165059723830405322580274245","226648320483175311692997674201269133946","311100817215807159187691403129357744252","100144166837669364512192836357626376763","63792765568580056179163103884180470483","243963676460623653154083742071998164648","119551679384851114196764630829041258753","153405421872193207990752309092560073935","278909186074132800432698082282382896590","15671858518546051546629668135058565990","35893545873239325762721256415289956814","138544246895320808400161296851545590173","185968746974941455511709189241712145614","222145706692804542376450807748179703430","114130619081363570523106887814773720393","185188502198700596293241853676074344917","141145949174673826279091874494441798883","262161161847737857941832974830041987470","71129972314255527767186607908951445981","59864637492938493793108509474305013757","124494740253876515552731677136552778821","21727714648732686667622563158779814011","211228816995103232581232033273353845266","311141460546665712174500012286366051967","164080567905533005842848281889882418674","148888679744364907914547684734664133430","10600956284264857335265537139443269803","125245703122217386897736126749395698467","137308419511180092251939623962299178082","218883128307939359184171681332820875377","127988859291043424237086806974356820642","273045288067284447485830817999573773093","84267773112134564364784139797492642852","266811542517968972688105136916838193987","51557254338563345509524072971027585032","278629680089223669178801647234753244634","200255792769210089207043871487905114675","269054451925850607323300558306367384860","314010443235059495749615152791628949019","26067837072021538579904022230730788307","46111710266238738795524302026193695817","129324000800897680348176127464557342340","175418508351932444985153476227645137711","318176473707978992031575995510273483160","318996573657594525047767501473900122954","46211120672597080716100674419646891264","38896604067955582334320845613872211911","5734141728892600123696259190261616247","244235179224717275911023519357483215257","86938719147560143984845906381202175285","179551716908883155707035358896412047360","188576995248430660190943603585075032406","21963058621268847919325162034529991532","98569008745321922082888928458648851277","335640257331471671116131531193630502632","50691212394757140008105375687035234070","226099829169479940717622351394710274650","160274570462055782043196777638640100152","122288820319781581153366108745708685908","132701505626212827615922283800117662406","171658566457065442672049333622284216904","172742225733235458305244306200646544906","209227075584005240472791885485795569645","110119589199323040428253607555282362471","21554304094996571748664556052866655744","87081589289509689119060908190386298210","192274493397872807890494022170637354326","340271110228997574010985008395996200524","254074147727273573941121635195930942394","3047320685141525316432519853806680432","250908534489895776868007861348129143952","52509445888919386400655368826512866328","23307830390476342700377342266690151047","78276825763352885414280165663584258337","124449886990354933921121775364730053009","220136830377411391474267921429386800810","98881477273503610624199393325563527624","105135349804760838859480469610730392589","26274561640879368128556264350392685464","168097022942206300824952078901411024807","136080850638218547994855471482801926102","33248538891717922972968589203986299605","208295258912040602656491374917973565056","337558804444690708063816623677212780666","276844150374022186426661713848622185875","279389415282046494387182337776244381827","173369288335438682889981120101357918382","9542569219337572000600842033140286238","271286839271674372433382809877629296710","79969316557965529317788484841649823096","297134648793052698226006801233712997142","66339467018854743531480353130863303624","8221953189601722337768983025140823939","175719187590312911399775832717247477535","236271571639305973267778767052496902357","275666634967472612575414304488211932253","12349533118170723250236854922075399680","310207373135482884558950552997721692586","219963682192448664061767494209506837275","220731672327580888729709894724753189364","128112414200092161996504074551011938586","162457891831631328216661150593414012360","282621901268003374381021287229572283781","111553076056513399592686527584588521584","77963492344522401504911365356639765233","79397658925979584152759316914561858061","217689733756302869928151104980022941069","308059919503845790278778368185805939156","6424434202352660321519869138003947293","180699139841776452475062246599998866390","29295749134112526966591919860736441771","84444226755379042315023196681988888899","46587471684125606893486072332533668539","20535522865750565510243848547986359170","98395859861089559917950523553255697843","80071314523501115963552454401519180218","179533507747346131913784076369014960090","2928776452200006292929310634320039104","21226909479970390739288915492305016255","46373195669931144059407593078815830911","123228794463908980139816109811884264138","284626271855728327122229407036839889964","3744244909522878763052903177337547261","86907958693045194455982728523196592184","224268714210591906207539297983554453315","23902182464198869944356035608993019980","276590694668060066152714386460802348588","131703022105069002297193389580543612555","19689648744352491163226034162864574919","275756422132930576412575768258856170291","36874496110308780079577403583725749128","110370435056457304931595381157907583241","32906577531104069441971254211959170452","23062003975519623990645013737278292769","238187122860979510713017900435627373267","86802059818029460442778303975885493367","80212760306461470983817765669465730405","117877083035966421146658146012056523214","1418254385695731109753410080551500930","336020746761767799925429693641686657202","267979792412503510024175493626857401640","114281582028010136823531589013476620611","39308804105358441976722066064644288141","89916242973255547560857857649345662650","283559100929580582231333172263230473954","107559760757761293967788261899529557821","20177849134506165193234951902321074166","61418062250270560226298014151215907906","74709977758696233189799803305038429513","271504508617968085905384753169885032979","67541508851473492888021831435189789597","79665404768485922805105299820064004431","70420042286990198223238146899926488611","327688692119686422816970155525685234868","218105167240884640424648241542882171513","61687140946887187464249936590192021149","147121415044535665618646026466938398235","322420355997578166932495691628778991842","143960399318839506002367125396998976510","177127460050614935447531550672308801325","105541773892090896267189505588712967943","17125251316418672658221284959373475292","261851875043843078569574811850091030041","332270643224430247310144051454885671277","132495408268578844483055551047245692082","37123263312133608723055587561393421303","18761104464292724317960725224154226604","160661021183552777426083631098665667521","157918414472960572200301933200231240069","35422355427190040971063676316903509455","11091537354088784345481623749583970080","11807671448220147328085383041897086495","27940449535390636504791313076939858552","232414625245332630381079093333825022968","251446212591022107246273591242738725046","147381902721946073251737343609080820546","294994372552998649072486573453151133654","305409098144489412097085403687735955863","116335736011954949746052702088023975209","196256070791749225490759318692862219247","331045054249352285495780190931172120675","130586631922119333519854700620671053005","80330027199913740852812245854448102929","300061631197680494567709538155699135659","241144006775696836227799524834828723259","264557889781177023844883968120917961904","199691586646589612820415568579376509418","274833108901968272766485201336894302510","90824759767575422037050810503692510255","183476781791938096625725232247611359736","187307719091958707046234199274268168002","7351761415300398744843746699154956669","185369354020258472419248218982033030494","116073642277352865751558864205827594033","301715161986455396617736213646997807156","306101543781167872614586025612716436912","208548113609199993444799689166804804598","88142079370470235025535543856684107734","168027407852583672086948697053114064190","181412496576067349280480948368901640249","130532331088465921104296624171215926375","225623652277968178988436973653216407803","3883217670893876691241269306695795011","272894543856491739576587487823313567996","207950151926376358536030805698740886514","265538573126316347860033985072302059647","69342393469729137036617890296547553246","127155381179294174651838731731776969620","85257359514100897542765036031969472128","68930551501546791443526498684520215331","106801351245908866476548959299980933683","12035205531620744062474283567832058868","236433681237888015520716335234652963299","72642661837093908470919226892977372820","231048170699627891973702596125553967939","162735426941123411678266180117270099457","189187553166279663038686166582015814068","269238050412219478509402183780295213601","17203024303799329337437043554238105844","232786120738303140408852380482748613555","64027868562455505075668207477456442452","331555899962050324433224275498286278132","32744831993876411314895981978233168569","182547779437152824856154438370787274709","271705306062335767091941725131936001270","110979123348951632785670069350416841976","264926182915734870388419359227474138311","119666189256789368179743149695703259178","132132227208554973571231004312232931537","82694627131184174689455449277054980496","274861639910583632594131864029637947660","204551649837956030259913953799145989561","43425641103644655887180880214818059531","309695734538658744567169453514295370384","62679489325008041842865564045954411745","264255918474661559219721839905896493185","302229851243488261359776873917479022974","153109379333006019164439041076950500872","306825068297494532414238597821660280022","206294646297781371725451147818940199469","99647409435839532872523244092633513033","130772259808607924376092594863206184978","71150435925942412209631069572923662827","216728632316079590886400962296709227402","182763750737385472034118990054400153825","19352183118880618526414351847169042909","330162264197632864884739563887511363498","309344387705112322967771414765319594480","307865502407202928214062545722168016825","37744866079491907252297990716730666363","159618757123732409087788596033913832286","108048753174149484957983265639824121202","173029626365844875769005359313273267193","326676452373896343355929990049221900725","194102104490808781816437953826633371176","81815947219662378998242735518716201604","106385679193204059201141484562865338586","161856008297430333874953417483138226153","126514473319451148008860351800741009527","14118477262820930891418239326286000913","33577877435311541539939415324166568195","279376753567963553199497498870101981740","97160172369782084370821171451362809410","24931441753929560756825210206907059321","221937207217018487866533718760181855","76206314120833759019671479301910591155","10129430350921474121712872821518433597","261498562478656347396546646539604902596","187863886907563729651910571578694819251","331543887342309358183581258391391796660","222736578488831114058998735116176625346","326502352139085212533860800976342091066","249265171199079211022026766019378921042","138251069712449222360777599363025811498","70502326881585920256288128656999910050","101933435801961699327316920490646614215","300849492847748438754612587549939850582","295007900307702228678140538226563026560","81815947219662378998242735518716201604","106385679193204059201141484562865338586","161856008297430333874953417483138226153","185025942810121518782104886935155131670","18004248208922438567098724372819606716","251908380142230562210251607408014550362","186788787604926425893795677913285815420","137907564390974238160668923503072040908","349626048862652641911168553037473353","326676452373896343355929990049221900725","194102104490808781816437953826633371176","10129430350921474121712872821518433597","261498562478656347396546646539604902596","187863886907563729651910571578694819251","331543887342309358183581258391391796660","222736578488831114058998735116176625346","88533000411968470569917989089358899174","258315070481015897463711901427950927352","133107699954147075939500781398986183931","169093947901663381741965568837107238493","26756363391079105876186930488354329063","221937207217018487866533718760181855","76206314120833759019671479301910591155","174147167739242662662325325395383182049","106385679193204059201141484562865338586","161856008297430333874953417483138226153","213361043212864473519468554583326180045","40803789063580408466760900335165414024","295493603414020261567843791661857736803","76078660640598121720436879185540674290","31777459286823208004242084073409262366","141783495987509501973297282894087711317","241152913241003547055268395824753321005","86895604944597156058063179081735690880","240638260357473835320990671602045859280","10129430350921474121712872821518433597","261498562478656347396546646539604902596","187863886907563729651910571578694819251","331543887342309358183581258391391796660","222736578488831114058998735116176625346","150577647152064069428810422862511084193","215125381782208901764462330006290718693","291211213805650502153197706115522115352","333948039614429712220302776362038795042","266045764514427169940455706263819459211","125453778506154893860565851297785204997","46357775455307028078949233618945139353","112758144486892548801641743337860902148","327906669378573180732218216368470394259","288716469121652658644986057102592118607","307483868995088038721580527432088455271","211385707274910231485895941148526823546","234200873137844919479483856424286064962","110623467544849586985293016819298305544","175244866950796266385166532495913576571","260642422226724666313666302515308795414","116106611198423001415713349181350507357","146319980503252590630452796899256952181","262078489246147790231080515357112379499","97243882055193546934391458444004379909","149207589168904868985494873638276021326","55145622405164596246662034587248131665","310430951977019026711361972093255830929","246201184165324882277524943712752215724","60769262350954905500959108901161974661","45575905438806842081161898255107177912","158189152782542295232204050435659287094","148125449456123866146523772033911174742","45735053068238751275341587714072169276","298603844974194396067388115147023510197","194254173655912489746278394743795036459","29225307589876400137866839009366125144","206467515435638883414254038702088425299","88332677559666613721326653420260245128","319106426102027952394286740462548946769","54769561999622905009024085458674370621","176765822719684591196160776951587514674","321148046276199989399655065914140541158","231316614144103686063345968432504250969","255918188249974329755199860232328093051","160582181340902748646945448644680740857","68941541487294786493601612345909436971","337080887684049738416829714672253484375","160295658746160886675393218135158789852","325275910650956630089520070724815051262","171026489662924829003327564459054234658","144012319823218180708152564121588003739","149086985213099347259688533714218462646","169817829002772959224715116646326491064","260098362017696852684436370394853622013"],"threshold":0.9},"id":"CVE-2026-73241-cd10d833","signature_type":"Line"},{"target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_recv_authentication_response"},"deprecated":false,"digest":{"function_hash":"61484004935694442737948472813653789411","length":499},"id":"CVE-2026-73241-d005b8bc","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695"},{"digest":{"function_hash":"273666884238746818107833787441566006597","length":170},"id":"CVE-2026-73241-e5248ef7","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_process_authentication_request_with_cookie"},"deprecated":false},{"id":"CVE-2026-73241-ecf0dcbb","signature_type":"Function","signature_version":"v1","source":"https://github.com/freerdp/freerdp/commit/b05a9510787c83c87ffc5fa8d7cc9f06ed971695","target":{"file":"libfreerdp/core/rdstls.c","function":"rdstls_send_authentication_response"},"deprecated":false,"digest":{"length":380,"function_hash":"141704580816610505551292455720888532250"}}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-73241.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"}]}