danarhirany300-ctrl/CVE-2026-56190-Windows-Server-2022-RDP

PoC

Unauthenticated RDP vulnerability in termsrv.dll (Windows Server 2022). Proof of Concept for heap spray, XFG bypass, Instruction Pointer control, and reliable Denial of Service (Event ID 7031).

view exploit source poc_in_githubauthor danarhirany300-ctrlpublished 2026-10-24catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-56190US—Exploit
Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan