{"vulnerability": "cve-2026-6728", "sightings": [{"uuid": "e7c5ce23-329e-441e-8768-f233d5eeb539", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67289", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms2bpmtxek2l", "content": "CVE-2026-67289 - freerdp\nA malicious RDP server can trick a FreeRDP client into sending malicious requests to an HTTP proxy. This can happen when a client connects to a compromised RDP server. To fix this, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp #CVE #infosec", "creation_timestamp": "2026-08-01T20:12:05.133644Z"}, {"uuid": "8f8da07d-6acb-4770-94be-0df2f9e21b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67289", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117024740061481140", "content": "CVE-2026-67289: FreeRDP \u22643.28.0 has a CRITICAL flaw (CVSS 9.8) in RDP redirection \u2014 improper CRLF/control character validation exposes clients to HTTP header injection via proxies. Upgrade to 3.29.0+ now. https://radar.offseq.com/threat/freerdp-before-3290-affected-versions-3280-does-not-validate-crlf-and-control-characters-in-the-server-2a6872dd9d8a1a0c #OffSeq #FreeRDP #CVE202667289 #infosec", "creation_timestamp": "2026-08-02T07:30:24.406090Z"}, {"uuid": "96cd1184-7083-4456-8194-5e87d9e51c3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6728", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mmbikrej3m2a", "content": "CVE-2026-6728 revslider (CVSS Score 5.3) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-20T08:32:25.548429Z"}, {"uuid": "f556e5fe-e7fa-4054-bdea-6f927324d38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-67289", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mschvke4iv2s", "content": "CVE-2026-67289 - freerdp2\nA security issue affects FreeRDP versions 3.28.0 and earlier. A malicious RDP server can inject arbitrary requests into the HTTP proxy used by the client,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#freerdp2 #canonical #Ubuntu1604LTS #CVE #infosec", "creation_timestamp": "2026-08-05T02:24:03.757476Z"}]}