CVE-2026-109245

Versions of FreeRDP 3.0.0 before 3.32.0 are vulnerable to an improper certificate validation flaw within the freerdp_http_request() function located in libfreerdp/utils/http.c. The root cause is that the software completes TLS handshakes without verifying the server certificate chain. This allows...