{"vulnerability": "CVE-2026-6729", "sightings": [{"uuid": "6158b5a9-d1b7-49c0-877c-cbfc1281a4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67292", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msapafceeg2s", "content": "CVE-2026-67292 - freerdp2\nFreeRDP, a remote desktop client, has a security issue that allows a malicious server to see sensitive information when you connect to it. This could happen when you're\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-04T09:30:04.345105Z"}, {"uuid": "0aa7234e-bd0d-49ef-97c1-bbb8a2e112b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67294", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msapdxh3ex23", "content": "CVE-2026-67294 - freerdp2\nFreeRDP versions before 3.29.0 have a security issue that allows a malicious client to pretend to be a trusted server. This can happen when a client has a certificate\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-04T09:32:04.100172Z"}, {"uuid": "7f50858e-2e76-4d8f-a294-378eb6d55a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msapafu3po2l", "content": "CVE-2026-67293 - freerdp2\nFreeRDP versions 3.28.0 and below may incorrectly accept a wildcard certificate for certain domain names, weakening the security of encrypted connections. This could allow\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-08-04T09:30:04.853828Z"}, {"uuid": "ab022cf3-3ff7-40ff-af5f-2e343378e9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms5odpyx7h2z", "content": "CVE-2026-67293\nFreeRDP versions before 3.29.0 are at risk of accepting fake SSL certificates. This could allow an attacker to pretend to be a trusted server, making it harder to know who you're actually connecting to. Update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-03T04:36:03.795178Z"}, {"uuid": "ffb35596-15a9-4ccb-bf52-0ae37212e240", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67292", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpofl4v2m", "content": "CVE-2026-67292 - freerdp\nFreeRDP versions before 3.29.0 are vulnerable to a security issue that allows attackers to access sensitive information. This can happen when a malicious user connects to a FreeRDP server. To\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:12:06.424566Z"}, {"uuid": "cb3a7411-65e6-4bc2-9c6b-1759d2f97162", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bt6l6h22l", "content": "CVE-2026-67293 - freerdp\nFreeRDP versions 3.28.0 and earlier have a security issue that can allow an attacker to pretend to be a trusted server. This is because FreeRDP does not properly check the identity of the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:14:12.105785Z"}, {"uuid": "bb59d901-8242-43dd-9a21-980c2ecfd2b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67294", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bt7r4ej2p", "content": "CVE-2026-67294 - freerdp\nFreeRDP before 3.29.0 fails to properly check the type of server certificate it receives. This means that a certificate intended for client use might be accepted as a valid server\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:14:12.919843Z"}, {"uuid": "a17b4ada-5b49-4159-998e-02ddb66435fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67299", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l4yjltv2t", "content": "\ud83d\udfe0 CVE-2026-67299 - High (7.5)\n\nFreeRDP before 3.29.0 contains a client-side heap use-after-free in the async update message prox...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67299/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T23:00:37.253893Z"}, {"uuid": "44d84330-8402-4f88-83b5-ccf71a31467a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67298", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2l4rr73c2n", "content": "\ud83d\udfe0 CVE-2026-67298 - High (7.5)\n\nFreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channe...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67298/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-01T23:00:30.484417Z"}, {"uuid": "920f71a6-7870-4a4c-b8d8-b5251627731a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67291", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ms2oiob3iy2t", "content": "\ud83d\udfe0 CVE-2026-67291 - High (7.5)\n\nFreeRDP before 3.29.0 (affected versions <= 3.28.0) contains a heap out-of-bounds read in upda...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-67291/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-02T00:00:50.715175Z"}, {"uuid": "1ca6f298-7ced-4ef3-98d9-669057851f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67294", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117025801741348694", "content": "CVE-2026-67294 | FreeRDP <3.29.0: Improper EKU validation lets trusted clientAuth certs be accepted as server certs in TLS, enabling RDP server impersonation. Severity: CRITICAL. Patch pending. https://radar.offseq.com/threat/freerdp-before-3290-improperly-validates-the-extended-key-usage-eku-purpose-of-the-peer-certificate-be33a6738062bc49 #OffSeq #FreeRDP #TLS #infosec", "creation_timestamp": "2026-08-02T12:00:24.376304Z"}, {"uuid": "2922660b-39a0-410f-b90f-0582964def80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67297", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3ms3x2te2p32j", "content": "CVE-2026-67297 - DoS in FreeRDP before 3.29.0. Malicious RD Gateway can send oversized chunked HTTP responses, exhausting client memory. CVSS 7.5. Unpatched - monitor for updates. #CVE #FreeRDP #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-67297/", "creation_timestamp": "2026-08-02T12:06:49.108838Z"}, {"uuid": "40f3f7fe-e6e1-4df7-b90c-5b2fdc0ea59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67297", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117025826980637484", "content": "CVE-2026-67297 - DoS in FreeRDP before 3.29.0. Malicious RD Gateway can send oversized chunked HTTP responses, exhausting client memory. CVSS 7.5. Unpatched - monitor for updates. #CVE #FreeRDP #infosec\nhttps://www.valtersit.com/cve/CVE-2026-67297/", "creation_timestamp": "2026-08-02T12:06:49.656868Z"}, {"uuid": "8530ec19-cb3b-413e-a351-29f823721018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67294", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschhas2hn2l", "content": "CVE-2026-67294 - freerdp2\nFreeRDP, a remote desktop protocol implementation, is affected. This vulnerability allows a malicious client to pretend to be a server, potentially intercepting\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:16:05.141682Z"}, {"uuid": "78e03243-9863-42f2-a60e-36a35a1fe524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67292", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschkt6pip2a", "content": "CVE-2026-67292 - freerdp2\nFreeRDP, a remote desktop software, has a security flaw that allows hackers to see sensitive data sent between a client and a server. This is a concern for\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:18:03.974163Z"}, {"uuid": "0c2058f3-116b-440d-aed8-4e544cd44a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msci4p7jjs2h", "content": "CVE-2026-67293 - freerdp2\nFreeRDP, a remote desktop protocol software, fails to properly check the identity of servers using wildcard certificates. This makes it possible for an attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:28:05.137020Z"}]}