<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-05T10:54:19.812237+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eff4b897-7e8e-4217-a71f-6a29417d28b9/export</id>
    <title>eff4b897-7e8e-4217-a71f-6a29417d28b9</title>
    <updated>2026-08-05T10:54:19.832031+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eff4b897-7e8e-4217-a71f-6a29417d28b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschof7ulq2z", "content": "CVE-2026-66402 - freerdp2\nFreeRDP versions 3.28.0 and earlier have weaknesses in how they verify the identity of remote servers. This makes it possible for an attacker to pretend to be a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:20:04.274291Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eff4b897-7e8e-4217-a71f-6a29417d28b9/export"/>
    <published>2026-08-05T02:20:04.274291+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bae53f87-2d18-440c-806e-f6fcfd4372d3/export</id>
    <title>bae53f87-2d18-440c-806e-f6fcfd4372d3</title>
    <updated>2026-08-05T10:54:19.835043+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bae53f87-2d18-440c-806e-f6fcfd4372d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117025094010730373", "content": "CVE-2026-66402: FreeRDP &amp;lt;=3.28.0 suffers CRITICAL TLS cert validation flaws. Attackers can bypass server identity checks \u2014 risk of MITM &amp;amp; impersonation. Patch to 3.29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c368 #OffSeq #Vulnerability #TLS #FreeRDP", "creation_timestamp": "2026-08-02T09:02:35.324981Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bae53f87-2d18-440c-806e-f6fcfd4372d3/export"/>
    <published>2026-08-02T09:02:35.324981+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a/export</id>
    <title>2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a</title>
    <updated>2026-08-05T10:54:19.835180+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms3mnkwzbp2x", "content": "FreeRDP &amp;lt;=3.28.0 is vulnerable (CVE-2026-66402, CRITICAL) to TLS cert validation bypass. Upgrade to 3.29.0 to fix identity verification flaws. \ud83d\udd10 Details: https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c3...", "creation_timestamp": "2026-08-02T09:00:26.823995Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a/export"/>
    <published>2026-08-02T09:00:26.823995+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a3bce76c-1994-40bc-a0f7-1ee7fb951882/export</id>
    <title>a3bce76c-1994-40bc-a0f7-1ee7fb951882</title>
    <updated>2026-08-05T10:54:19.835287+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a3bce76c-1994-40bc-a0f7-1ee7fb951882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bm2o5mc2a", "content": "CVE-2026-66402 - freerdp\nFreeRDP versions 3.28.0 and earlier have a security issue that allows an attacker to pretend to be a trusted server. This could happen if an attacker gets a fake SSL certificate that looks\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:10:05.041087Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a3bce76c-1994-40bc-a0f7-1ee7fb951882/export"/>
    <published>2026-08-01T20:10:05.041087+00:00</published>
  </entry>
</feed>
