CVE-2026-23948 | FreeRDP up to 3.21.x rdp_write_logon_info_v2 null pointer dereference (GHSA-6f3c-qvqq-2px5)

A vulnerability was found in FreeRDP up to 3.21.x. It has been declared as problematic. This issue affects the function rdp_write_logon_info_v2. Such manipulation leads to null pointer dereference.

This vulnerability is listed as CVE-2026-23948. The attack may be performed from remote. There is no available exploit.

It is recommended to upgrade the affected component.