CVE-2026-32624 | neutrinolabs xrdp up to 0.10.5 Domain Name xrdp.ini domain_user_separator heap-based overflow (GHSA-7q2g-6fjr-h6pp)

A vulnerability was found in neutrinolabs xrdp up to 0.10.5 and classified as critical. Impacted is the function domain_user_separator of the file xrdp.ini of the component Domain Name Handler. The manipulation results in heap-based buffer overflow.

This vulnerability is known as CVE-2026-32624. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.