Is CVE-2026-114047 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-114047?

CVE-2026-114047 has a CVSS v3 severity of MEDIUM (6.8).

Back

CVE-2026-114047

Description

FreeRDP from 2.0.0 before 3.32.0 contains an improper certificate validation vulnerability in its proxy that accepts untrusted target TLS certificates when no verification module is configured. Network-positioned attackers can intercept the proxy's outbound connection and present a self-signed, wrong-hostname certificate to impersonate the RDP target and receive proxied session data.