164941 matches found
DEBIAN-CVE-2026-80230
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
DEBIAN-CVE-2026-80229
When performing transfers via libcurl’s multi interface, pooled TLS connections can outlive their originating easy handles. In OpenSSL 3 provider configurations, libcurl attaches an allocated library context to the easy handle's state and passes it to OpenSSL without acquiring an ownership...
DEBIAN-CVE-2026-82208
With the wolfSSL backend, when CA caching is enabled and an CURLOPTSSLCTXFUNCTION callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectl...
DEBIAN-CVE-2026-18924
A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process...
CVE-2026-19931
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...
CVE-2026-80230
When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...
CVE-2026-86297
creationtimestamp| type| source ---|---|--- 2026-09-06 17:13:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117225214266621343 2026-09-07 11:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117229527048942650 2026-09-07 11:30:28+00:00| seen|...
CVE-2026-19633
creationtimestamp| type| source ---|---|--- 2026-09-06 17:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muuhrvsj4b2r 2026-09-06 17:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/cr3gxk6hh7vc3 2026-09-06 20:18:43+00:00| seen|...
MINI-7Q74-X3HW-8HHG
Bulletin has no description...
MINI-WXWG-35PR-3WMP
Bulletin has no description...
MINI-54QM-VR35-82QQ
Bulletin has no description...
MINI-443V-9PQX-QF7F
Bulletin has no description...
MINI-CPVM-JQC8-6RHJ
Bulletin has no description...
MINI-XRW2-M8Q2-Q678
Bulletin has no description...
MINI-8C6J-53PV-3PX4
Bulletin has no description...
MINI-JR5M-4675-V922
Bulletin has no description...
MINI-PP52-WHH3-3RX6
Bulletin has no description...
MINI-2PVF-HX52-J6QW
Bulletin has no description...