CVE-2026-67294

creationtimestamp| type| source ---|---|--- 2026-08-01 20:14:12+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3ms2bt7r4ej2p 2026-08-02 12:00:24+00:00| seen| https://infosec.exchange/users/offseq/statuses/117025801741348694 2026-08-04 09:32:04+00:00| seen|...

DEBIAN-CVE-2026-67294

FreeRDP before 3.29.0 improperly validates the Extended Key Usage EKU purpose of the peer certificate during client-side server TLS authentication. In x509utilsverify, when server-purpose X509PURPOSESSLSERVER verification fails, the code falls back to client-purpose and any-purpose verification, ...