THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-67289 (CRITICAL 9.8) — FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written

[NVD] CVE-2026-67289 (CRITICAL 9.8) — FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written

mednvdPublished 2026-08-01

CVE-2026-67289 CVSS: 9.8 CRITICAL Published: 2026-08-01T13:16:57.803

FreeRDP before 3.29.0 (affected versions <= 3.28.0) does not validate CRLF and control characters in the server-controlled RDP redirection TargetNetAddress field. This value is copied into the client's ServerHostname and, when the client connects through an HTTP proxy, is written directly into the proxy CONNECT request line and

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67289