{"vulnerability": "CVE-2026-66402", "sightings": [{"uuid": "a3bce76c-1994-40bc-a0f7-1ee7fb951882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bm2o5mc2a", "content": "CVE-2026-66402 - freerdp\nFreeRDP versions 3.28.0 and earlier have a security issue that allows an attacker to pretend to be a trusted server. This could happen if an attacker gets a fake SSL certificate that looks\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:10:05.041087Z"}, {"uuid": "2d8a94a8-baf1-42b5-9b4e-0cd09f440c9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ms3mnkwzbp2x", "content": "FreeRDP <=3.28.0 is vulnerable (CVE-2026-66402, CRITICAL) to TLS cert validation bypass. Upgrade to 3.29.0 to fix identity verification flaws. \ud83d\udd10 Details: https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c3...", "creation_timestamp": "2026-08-02T09:00:26.823995Z"}, {"uuid": "bae53f87-2d18-440c-806e-f6fcfd4372d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-66402", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117025094010730373", "content": "CVE-2026-66402: FreeRDP <=3.28.0 suffers CRITICAL TLS cert validation flaws. Attackers can bypass server identity checks \u2014 risk of MITM & impersonation. Patch to 3.29.0 ASAP. \ud83d\udd12 https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-contains-multiple-tls-certificate-identity-validation-277a8c919a50c368 #OffSeq #Vulnerability #TLS #FreeRDP", "creation_timestamp": "2026-08-02T09:02:35.324981Z"}]}