What is CVE-2026-67293?
FreeRDP versions before 3.29.0 contain an improper certificate hostname validation vulnerability due to insecure wildcard matching in TLS hostname matcher. This could allow certificate impersonation for remote desktop servers. Upgrade to FreeRDP version 3.29.0 or later to fix the issue.
Azərbaycanca: FreeRDP-nin 3.29.0 versiyasından əvvəlki versiyalarında TLS hostname yoxlanışında zəiflik var. Təhlükəsiz olmayan wildcard uyğunlaşması səbəbindən uzaq masaüstü serverlər üçün sertifikat saxtakarlığı mümkündür. FreeRDP-ni 3.29.0 və ya daha yuxarı versiyaya yeniləmək tövsiyə olunur.
Related CVEs
link basis: same weakness class CWE-287
FAQ2
What software is affected by CVE-2026-67293?
This vulnerability affects FreeRDP versions prior to 3.29.0.
How can the CVE-2026-67293 vulnerability be fixed?
It is recommended to upgrade to FreeRDP version 3.29.0 or later.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.