49579 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-78131
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - strongSwan 4.2.0 through 6.0.7 has a missing release of memory after its effective lifetime in the x509 plugin's attribute certificate parser. CVE-2026-78131 No...
SUSE CVE-2026-84447
unknown...
CVE-2026-86223
creationtimestamp| type| source ---|---|--- 2026-09-06 21:35:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/57ij2pkhxfje5...
CVE-2026-80230
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
CVE-2026-13608
A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle MITM attack can inject a premature or shortcut response that bypasses complete peer...
CVE-2026-82208
With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...
CVE-2026-80229
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
CVE-2026-80231
A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...
CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-82209
When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...
CVE-2026-19931
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...
CVE-2026-19634
creationtimestamp| type| source ---|---|--- 2026-09-06 17:55:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4f6xrkmaqmrdu...
MINI-RMH3-GJRG-H3JX
Bulletin has no description...
MINI-GVJJ-8953-F4RH
Bulletin has no description...
MINI-3G36-593G-WH8R
Bulletin has no description...
MINI-8C4M-J22M-6R7G
Bulletin has no description...
MINI-8J42-J4JR-85X6
Bulletin has no description...
MINI-85MV-5R7F-Q46R
Bulletin has no description...