CVE-2026-42218

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1

Description The login interface contains a timing side-channel issue. A remote attacker can exploit discrepancies in response processing times to determine if a specific username exists on the system, resulting in unauthorized information disclosure through username enumeration.

Recommendations Update to version 0.10.6.1.