=== CVE-2026-55626 xrdp Xvnc-UDS authentication reproduction ===
Root: /workspace/bundle
Repository: /pruva/project-cache/repo
Reading package lists...
Building dependency tree...
Reading state information...
git is already the newest version (1:2.53.0-1ubuntu1).
ca-certificates is already the newest version (20260601~26.04.1).
build-essential is already the newest version (12.12ubuntu2.26.04.2).
autoconf is already the newest version (2.72-3.1ubuntu2).
automake is already the newest version (1:1.18.1-3build1).
libtool is already the newest version (2.5.4-9).
pkg-config is already the newest version (2.5.1-4).
libpam0g-dev is already the newest version (1.7.0-5ubuntu3.1).
libssl-dev is already the newest version (3.5.5-1ubuntu3.2).
libx11-dev is already the newest version (2:1.8.13-1).
libxfixes-dev is already the newest version (1:6.0.0-2build2).
libxrandr-dev is already the newest version (2:1.5.4-1build1).
libxkbfile-dev is already the newest version (1:1.1.0-1build5).
tigervnc-standalone-server is already the newest version (1.15.0+dfsg-2build1).
xauth is already the newest version (1:1.1.2-1.1build1).
x11-xserver-utils is already the newest version (7.7+11build1).
xterm is already the newest version (407-1ubuntu1).
procps is already the newest version (2:4.0.4-9ubuntu1).
iproute2 is already the newest version (6.19.0-1ubuntu1.1).
netcat-openbsd is already the newest version (1.234-1).
Solving dependencies...
0 upgraded, 0 newly installed, 0 to remove and 45 not upgraded.
Vulnerable commit: ee84a41c7d76f651bea45b89303d56d894a2f057
Fixed commit:      517b8a180d8cbad1b7950ff4f6b31491318f5bb5
HEAD is now at ee84a41c Merge pull request #3800 from metalefty/v0.10-freebsd-ci
HEAD is now at ee84a41c Merge pull request #3800 from metalefty/v0.10-freebsd-ci
HEAD is now at 517b8a18 CVE-2026-55626: Disable Xvnc TCP listning in UDS mode
HEAD is now at 517b8a18 CVE-2026-55626: Disable Xvnc TCP listning in UDS mode
vulnerable attempt 1: xrdp launched Xvnc display :10; probing TCP 5910
{"connected": true, "credentials_supplied": false, "desktop_name": "vscode@9cdf9b05c458", "height": 240, "host": "127.0.0.1", "none_security_offered": true, "port": 5910, "security_result": 0, "security_types": [1], "server_banner": "RFB 003.008\n", "server_init_received": true, "width": 320}
vulnerable attempt 2: xrdp launched Xvnc display :10; probing TCP 5910
{"connected": true, "credentials_supplied": false, "desktop_name": "vscode@9cdf9b05c458", "height": 240, "host": "127.0.0.1", "none_security_offered": true, "port": 5910, "security_result": 0, "security_types": [1], "server_banner": "RFB 003.008\n", "server_init_received": true, "width": 320}
fixed attempt 3: xrdp launched Xvnc display :10; probing TCP 5910
{"connected": false, "credentials_supplied": false, "error": "ConnectionRefusedError(111, 'Connection refused')", "host": "127.0.0.1", "none_security_offered": false, "port": 5910, "server_init_received": false}
fixed attempt 4: xrdp launched Xvnc display :10; probing TCP 5910
{"connected": false, "credentials_supplied": false, "error": "ConnectionRefusedError(111, 'Connection refused')", "host": "127.0.0.1", "none_security_offered": false, "port": 5910, "server_init_received": false}
CONFIRMED: vulnerable xrdp Xvnc-UDS sessions exposed an unauthenticated RFB TCP peer; fixed commit disabled that TCP listener.