THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2026-67293 (MEDIUM 4.2) — FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .e

[NVD] CVE-2026-67293 (MEDIUM 4.2) — FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .e

mednvdPublished 2026-08-01

CVE-2026-67293 CVSS: 4.2 MEDIUM Published: 2026-08-01T13:16:58.380

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard cer

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-67293