Fedora 44 : curl (2026-e691fbbfe7)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-e691fbbfe7 advisory. - Fix trailing dot domain super cookie CVE-2026-8924 - Fix SSH improper host validation CVE-2026-9547 - Fix password leak with netrc and user in URL...

ROOT-OS-DEBIAN-13-CVE-2026-11856 CVE-2026-11856 in rootio-curl - Patched by Root

Root has patched CVE-2026-11856 in the rootio-curl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-23915 CVE-2023-23915 in rootio-curl - Patched by Root

Root has patched CVE-2023-23915 in the rootio-curl package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-8926 affecting package curl for versions less than 8.11.1-10

CVE-2026-8926 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-8927 affecting package curl for versions less than 8.11.1-10

CVE-2026-8927 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

CVE-2026-8286 affecting package curl for versions less than 8.11.1-10

CVE-2026-8286 affecting package curl for versions less than 8.11.1-10. A patched version of the package is available...

ROOT-OS-DEBIAN-12-CVE-2025-10966 CVE-2025-10966 in rootio-curl - Patched by Root

Root has patched CVE-2025-10966 in the rootio-curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-3783 CVE-2026-3783 in rootio-curl - Patched by Root

Root has patched CVE-2026-3783 in the rootio-curl package for Root:Debian:12. Multiple fixed versions available...

Linux Distros Unpatched Vulnerability : CVE-2026-9079

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for...

Linux Distros Unpatched Vulnerability : CVE-2026-11564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first use...

Linux Distros Unpatched Vulnerability : CVE-2026-11586

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious...

CVE-2026-7168 affecting package curl for versions less than 8.11.1-7

CVE-2026-7168 affecting package curl for versions less than 8.11.1-7. A patched version of the package is available...

CVE-2026-6276 affecting package curl for versions less than 8.11.1-7

CVE-2026-6276 affecting package curl for versions less than 8.11.1-7. A patched version of the package is available...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: curl: curl-8.20.0-2.hum1 aarch64, x8664 libcurl-8.20.0-2.hum1 aarch64, x8664 libcurl-devel-8.20.0-2.hum1 aarch64, x8664 libcurl-minimal-8.20.0-2.hum1 aarch64, x8664 curl-8.20.0-2.hum1.src src...

Photon OS 4.0: Curl PHSA-2026-4.0-1020

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1020. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Curl PHSA-2026-5.0-0838

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-0838. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: curl: curl-8.20.0-0.1.hum1 aarch64, x8664 libcurl-8.20.0-0.1.hum1 aarch64, x8664 libcurl-devel-8.20.0-0.1.hum1 aarch64, x8664 libcurl-minimal-8.20.0-0.1.hum1 aarch64, x8664 curl-8.20.0-0.1.hum1.s...

Important Photon OS Security Update - PHSA-2026-5.0-0838

Updates of 'curl' packages of Photon OS have been released...

Linux Distros Unpatched Vulnerability : CVE-2026-4873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial...

Fedora 44 : curl (2026-f13d888b0f)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f13d888b0f advisory. - Fix bad reuse of HTTP Negotiate connection CVE-2026-1965 - Fix token leak with redirect and netrc CVE-2026-3783 - Fix wrong proxy connection reuse...