CVE-2026-67293

What it is

FreeRDP before 3.29.0 (affected versions <= 3.28.0) contains an improper certificate hostname validation vulnerability. The TLS hostname matcher (tls_match_hostname() in libfreerdp/crypto/tls.c) treats a wildcard pattern such as *.example.com as matching any hostname ending in .example.com, so it incorrectly accepts a wildcard certificate for multi-label subdomains like a.b.example.com (which OpenSSL's X509_check_host() rejects). This weakens TLS server authentication under wildcard-certificate conditions.

At a glance

Exploitability

Can be exploited over the network without logging in. High risk of data exposure, data tampering, service disruption.

Exploit odds

0.2% chance of exploitation in the next 30 days (EPSS).

Fix

A patch, advisory or fixed version is referenced. Upgrade or apply it.

Timeline

1. 2026-08-01 13:16 UTC PublishedDisclosed publicly on CVE.org and NVD
2. 2026-09-29 16:17 UTC Last updatedMost recent change to the record

Details

Published

2026-08-01 13:16 UTC

Last modified

2026-09-29 16:17 UTC

Exploit probability

0.2% · EPSS, next 30 days

Weakness

CWE-295 · Improper certificate validation

Record status

Analyzed

Affected

• Freerdp < 3.29.0

Attack profile CVSS 4.0 · 9.3

Attack vector

Network

Complexity

Low

Attack requirements

None

Privileges needed

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High