EUVD-2026-41511

🗓️ 03 Jul 2026 06:17:34Reported by EUVDType

Calling curl_easy_pause from the socket callback triggers a use-after-free in libcurl after a pointer is freed.

Reporter	Title	Published	Views	Family All 65
ATTACKERKB	CVE-2026-9080	3 Jul 202606:17	–	attackerkb
AlpineLinux	CVE-2026-9080	3 Jul 202606:17	–	alpinelinux
Chainguard	CVE-2026-9080 vulnerabilities	29 Jul 202602:16	–	cgr
Circl	CVE-2026-9080	3 Jul 202609:52	–	circl
curl security advisories	UAF after pause in socket callback	24 Jun 202608:00	–	curl
CVE	CVE-2026-9080	3 Jul 202606:17	–	cve
Cvelist	CVE-2026-9080 UAF after pause in socket callback	3 Jul 202606:17	–	cvelist
Debian CVE	CVE-2026-9080	3 Jul 202606:17	–	debiancve
F5 Networks	K000162394: libcurl vulnerability CVE-2026-9080	23 Jul 202614:21	–	f5
Hacker One	curl: CVE-2026-9080: UAF after pause in socket callback	19 May 202622:04	–	hackerone

[
  {
    "enisaIdVendor": [
      {
        "id": "bd27a90c-91e1-36d8-880e-f26f9395cf5c",
        "vendor": {
          "name": "curl"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0ac8ab62-829e-322d-802c-15ee5199cb9c",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.20.0 ≤8.20.0"
      },
      {
        "id": "0f72e448-41c3-3dde-8458-e8be5906b6d0",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.13.0 ≤8.13.0"
      },
      {
        "id": "4270a11d-f787-393d-bbd9-3d30352f71ab",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.16.0 ≤8.16.0"
      },
      {
        "id": "54292971-86a6-32d0-b4d8-784f8c6a7129",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.14.0 ≤8.14.0"
      },
      {
        "id": "6e26983d-497f-3fa3-b138-936138ed116a",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.14.1 ≤8.14.1"
      },
      {
        "id": "7842a05f-f5d7-355a-a06e-050b2440728f",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.19.0 ≤8.19.0"
      },
      {
        "id": "80fb9cb5-0289-3bcf-819c-26b700f7239e",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.15.0 ≤8.15.0"
      },
      {
        "id": "a560a855-44c2-36d2-98bf-c66207e54ec7",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.17.0 ≤8.17.0"
      },
      {
        "id": "f5cc1d54-226e-31b8-b7bf-9123f732e4d0",
        "product": {
          "name": "curl",
          "vendor": {
            "name": "curl"
          }
        },
        "product_version": "8.18.0 ≤8.18.0"
      }
    ]
  }
]

Source	Link
curl	www.curl.se/docs/CVE-2026-9080.json
curl	www.curl.se/docs/CVE-2026-9080.html
hackerone	www.hackerone.com/reports/3749204

03 Jul 2026 06:17Current

5.9Medium risk

Vulners AI Score5.9

EPSS0.00295