https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 05 Aug 2026 08:01:10 +0000 https://vulnerability.circl.lu/sighting/eff4b897-7e8e-4217-a71f-6a29417d28b9/export {"uuid": "eff4b897-7e8e-4217-a71f-6a29417d28b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschof7ulq2z", "content": "CVE-2026-66402 - freerdp2\nFreeRDP versions 3.28.0 and earlier have weaknesses in how they verify the identity of remote servers. This makes it possible for an attacker to pretend to be a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:20:04.274291Z"} {"uuid": "eff4b897-7e8e-4217-a71f-6a29417d28b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschof7ulq2z", "content": "CVE-2026-66402 - freerdp2\nFreeRDP versions 3.28.0 and earlier have weaknesses in how they verify the identity of remote servers. This makes it possible for an attacker to pretend to be a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:20:04.274291Z"} https://vulnerability.circl.lu/sighting/eff4b897-7e8e-4217-a71f-6a29417d28b9/export Wed, 05 Aug 2026 02:20:04 +0000 https://vulnerability.circl.lu/sighting/bae53f87-2d18-440c-806e-f6fcfd4372d3/export {"uuid": "bae53f87-2d18-440c-806e-f6fcfd4372d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117025094010730373", "content": "CVE-2026-66402: FreeRDP <=3.28.0 suffers CRITICAL TLS cert validation flaws. Attackers can bypass server identity checks \u2014 risk of MITM & impersonation. Patch to 3.29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c368 #OffSeq #Vulnerability #TLS #FreeRDP", "creation_timestamp": "2026-08-02T09:02:35.324981Z"} {"uuid": "bae53f87-2d18-440c-806e-f6fcfd4372d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117025094010730373", "content": "CVE-2026-66402: FreeRDP <=3.28.0 suffers CRITICAL TLS cert validation flaws. Attackers can bypass server identity checks \u2014 risk of MITM & impersonation. Patch to 3.29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c368 #OffSeq #Vulnerability #TLS #FreeRDP", "creation_timestamp": "2026-08-02T09:02:35.324981Z"} https://vulnerability.circl.lu/sighting/bae53f87-2d18-440c-806e-f6fcfd4372d3/export Sun, 02 Aug 2026 09:02:35 +0000 https://vulnerability.circl.lu/sighting/2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a/export {"uuid": "2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms3mnkwzbp2x", "content": "FreeRDP <=3.28.0 is vulnerable (CVE-2026-66402, CRITICAL) to TLS cert validation bypass. Upgrade to 3.29.0 to fix identity verification flaws. \ud83d\udd10 Details: https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c3...", "creation_timestamp": "2026-08-02T09:00:26.823995Z"} {"uuid": "2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms3mnkwzbp2x", "content": "FreeRDP <=3.28.0 is vulnerable (CVE-2026-66402, CRITICAL) to TLS cert validation bypass. Upgrade to 3.29.0 to fix identity verification flaws. \ud83d\udd10 Details: https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c3...", "creation_timestamp": "2026-08-02T09:00:26.823995Z"} https://vulnerability.circl.lu/sighting/2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a/export Sun, 02 Aug 2026 09:00:26 +0000 https://vulnerability.circl.lu/sighting/a3bce76c-1994-40bc-a0f7-1ee7fb951882/export {"uuid": "a3bce76c-1994-40bc-a0f7-1ee7fb951882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bm2o5mc2a", "content": "CVE-2026-66402 - freerdp\nFreeRDP versions 3.28.0 and earlier have a security issue that allows an attacker to pretend to be a trusted server. This could happen if an attacker gets a fake SSL certificate that looks\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:10:05.041087Z"} {"uuid": "a3bce76c-1994-40bc-a0f7-1ee7fb951882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bm2o5mc2a", "content": "CVE-2026-66402 - freerdp\nFreeRDP versions 3.28.0 and earlier have a security issue that allows an attacker to pretend to be a trusted server. This could happen if an attacker gets a fake SSL certificate that looks\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:10:05.041087Z"} https://vulnerability.circl.lu/sighting/a3bce76c-1994-40bc-a0f7-1ee7fb951882/export Sat, 01 Aug 2026 20:10:05 +0000