ROOT-OS-ALPINE-323-CVE-2026-9547 CVE-2026-9547 in curl - Patched by Root

Root has patched CVE-2026-9547 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-323-CVE-2026-9080 CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-9547 CVE-2026-9547 in curl - Patched by Root

Root has patched CVE-2026-9547 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root

Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-321-CVE-2026-12064 CVE-2026-12064 in curl - Patched by Root

Root has patched CVE-2026-12064 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-8932 CVE-2026-8932 in curl - Patched by Root

Root has patched CVE-2026-8932 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-6276 CVE-2026-6276 in curl - Patched by Root

Root has patched CVE-2026-6276 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

ROOT-OS-ALPINE-322-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...

Critical Photon OS Security Update - PHSA-2026-4.0-1061

Updates of 'curl' packages of Photon OS have been released...

Fedora 44 : curl (2026-e691fbbfe7)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e691fbbfe7 advisory. - Fix trailing dot domain super cookie CVE-2026-8924 - Fix SSH improper host validation CVE-2026-9547 - Fix password leak with netrc and user in URL...

ROOT-OS-DEBIAN-13-CVE-2026-11856 CVE-2026-11856 in rootio-curl - Patched by Root

Root has patched CVE-2026-11856 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-23915 CVE-2023-23915 in rootio-curl - Patched by Root

Root has patched CVE-2023-23915 in the rootio-curl package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-8926 affecting package curl for versions less than 8.11.1-10

CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-8927 affecting package curl for versions less than 8.11.1-10

CVE-2026-8927 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-8286 affecting package curl for versions less than 8.11.1-10

CVE-2026-8286 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

ROOT-OS-DEBIAN-12-CVE-2025-10966 CVE-2025-10966 in rootio-curl - Patched by Root

Root has patched CVE-2025-10966 in the rootio-curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3783 CVE-2026-3783 in rootio-curl - Patched by Root

Root has patched CVE-2026-3783 in the rootio-curl package for Root:Debian:12. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-9079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for...

Linux Distros Unpatched Vulnerability : CVE-2026-11564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first use...

Linux Distros Unpatched Vulnerability : CVE-2026-11586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious...