CVE-2026-66402 FreeRDP before 3.29.0 TLS Certificate Identity Validation Bypass

FreeRDP before 3.29.0 affected versions = 3.28.0 contains multiple TLS certificate identity validation weaknesses in tlsverifycertificate, tlsmatchhostname, and x509utilsgetdnsnames. Because FreeRDP performs custom Common Name and DNS SAN string matching instead of using OpenSSL's length-aware...

PT-2026-24613

Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid certificate for the PTR name. It's important to note that attacker must...

EUVD-2023-35729

Malicious code in bioql PyPI...

PT-2023-7073 · Elastic · Apm Server +3

Name of the Vulnerable Software and Affected Versions: Beats affected versions not specified Elastic Agent affected versions not specified APM Server affected versions not specified Fleet Server affected versions not specified Description: The issue is related to errors in the TLS certificate...