{"vulnerability": "cve-2026-66402", "sightings": [{"uuid": "a3bce76c-1994-40bc-a0f7-1ee7fb951882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bm2o5mc2a", "content": "CVE-2026-66402 - freerdp\nFreeRDP versions 3.28.0 and earlier have a security issue that allows an attacker to pretend to be a trusted server. This could happen if an attacker gets a fake SSL certificate that looks\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:10:05.041087Z"}, {"uuid": "2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms3mnkwzbp2x", "content": "FreeRDP <=3.28.0 is vulnerable (CVE-2026-66402, CRITICAL) to TLS cert validation bypass. Upgrade to 3.29.0 to fix identity verification flaws. \ud83d\udd10 Details: https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c3...", "creation_timestamp": "2026-08-02T09:00:26.823995Z"}, {"uuid": "bae53f87-2d18-440c-806e-f6fcfd4372d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117025094010730373", "content": "CVE-2026-66402: FreeRDP <=3.28.0 suffers CRITICAL TLS cert validation flaws. Attackers can bypass server identity checks \u2014 risk of MITM & impersonation. Patch to 3.29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c368 #OffSeq #Vulnerability #TLS #FreeRDP", "creation_timestamp": "2026-08-02T09:02:35.324981Z"}, {"uuid": "eff4b897-7e8e-4217-a71f-6a29417d28b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschof7ulq2z", "content": "CVE-2026-66402 - freerdp2\nFreeRDP versions 3.28.0 and earlier have weaknesses in how they verify the identity of remote servers. This makes it possible for an attacker to pretend to be a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:20:04.274291Z"}]}