{"uuid": "8f8da07d-6acb-4770-94be-0df2f9e21b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67289", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117024740061481140", "content": "CVE-2026-67289: FreeRDP \u22643.28.0 has a CRITICAL flaw (CVSS 9.8) in RDP redirection \u2014 improper CRLF/control character validation exposes clients to HTTP header injection via proxies. Upgrade to 3.29.0+ now. https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-does-not-validate-crlf-and-control-characters-in-the-server-2a6872dd9d8a1a0c #OffSeq #FreeRDP #CVE202667289 #infosec", "creation_timestamp": "2026-08-02T07:30:24.406090Z"}