Lucene search
+L

26 matches found

OSV
OSV
added 2026/09/16 2:13 p.m.9 views

ROOT-OS-ALPINE-321-CVE-2026-8286 CVE-2026-8286 in curl - Patched by Root

Root has patched CVE-2026-8286 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

8.1CVSS5.3AI score0.00309EPSS
SaveExploits1
OSV
OSV
added 2026/09/16 2:13 p.m.11 views

ROOT-OS-ALPINE-320-CVE-2026-8286 CVE-2026-8286 in curl - Patched by Root

Root has patched CVE-2026-8286 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

8.1CVSS4.8AI score0.00309EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/09/02 12:00 a.m.9 views

MiracleLinux 8 : curl-7.61.1-34.el8_10.13.ML.1 (AXSA:2026-1729:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1729:06 advisory. curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements: Regression of RHEL-73788. The .9...

8.1CVSS6AI score0.00309EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.15 views

TencentOS Server 3: curl (TSSA-2026:0910)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0910 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

8.1CVSS5.9AI score0.00309EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/21 6:01 a.m.17 views

RLSA-2026:57462 Important: curl security, bug fix, and enhancement update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements:...

8.1CVSS5.6AI score0.00309EPSS
SaveExploits1References3
Rockylinux
Rockylinux
added 2026/08/21 6:01 a.m.28 views

curl security, bug fix, and enhancement update

An update is available for curl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The curl packages provide the libcurl library and the curl utility for downloadi...

8.1CVSS5.7AI score0.00309EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/21 12:00 a.m.22 views

RockyLinux 8 : curl (RLSA-2026:57462)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:57462 advisory. curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements: Regression of Rocky Linux-73788. The .9...

8.1CVSS5.7AI score0.00309EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/08/21 12:00 a.m.14 views

AlmaLinux 8 : curl (ALSA-2026:57462)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:57462 advisory. curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements: Regression of AlmaLinux-73788. The .9...

8.1CVSS5AI score0.00309EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/08/21 12:00 a.m.10 views

Oracle Linux 8 : curl (ELSA-2026-57462)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-57462 advisory. - fix TLS/STARTTLS connection reuse vulnerability CVE-2026-8286 Tenable has extracted the preceding description block directly from the Oracle Linux security...

8.1CVSS4.9AI score0.00309EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/20 12:49 p.m.13 views

ROOT-OS-DEBIAN-11-CVE-2026-8286 CVE-2026-8286 in curl - Patched by Root

Root has patched CVE-2026-8286 in the curl package for Root:Debian:11. Multiple fixed versions available...

8.1CVSS5AI score0.00309EPSS
SaveExploits1
RedHat Linux
RedHat Linux
added 2026/08/20 11:51 a.m.99 views

Important: Red Hat Security Advisory: curl security, bug fix, and enhancement update

An update for curl is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

8.1CVSS5.2AI score0.00309EPSS
SaveExploits1References2
OSV
OSV
added 2026/08/20 12:00 a.m.9 views

ALSA-2026:57462 Important: curl security, bug fix, and enhancement update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements:...

8.1CVSS5.5AI score0.00309EPSS
SaveExploits1References4
AlmaLinux
AlmaLinux
added 2026/08/20 12:00 a.m.15 views

Important: curl security, bug fix, and enhancement update

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fixes: curl: curl: Insecure connection establishment due to TLS configuration mismatch CVE-2026-8286 Bug Fixes and Enhancements:...

8.1CVSS5AI score0.00309EPSS
SaveExploits1References4
Oracle linux
Oracle linux
added 2026/08/20 12:00 a.m.16 views

curl security, bug fix, and enhancement update

7.61.1-34.el810.13 - fix TLS/STARTTLS connection reuse vulnerability CVE-2026-8286 7.61.1-34.el810.12 - NTLM: use HTTP/1.0 instead of HTTP/1.1 for compatibility RHEL-171912...

8.1CVSS5.4AI score0.00309EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2026/08/20 12:00 a.m.32 views

RHEL 8 : curl (RHSA-2026:57462)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:57462 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP,...

8.1CVSS5.7AI score0.00309EPSS
SaveExploits1References4
Oracle linux
Oracle linux
added 2026/08/17 12:00 a.m.21 views

curl security update

8.12.1-4.4 - fix proxy environment variable change detection CVE-2026-8927 8.12.1-4.el102.3 - fix HTTP Negotiate connection reuse auth bypass CVE-2026-1965 - fix OAuth2 bearer token leak via redirect and netrc CVE-2026-3783 - fix proxy connection reuse with wrong credentials CVE-2026-3784...

9.1CVSS5AI score0.005EPSS
SaveExploits1
Oracle linux
Oracle linux
added 2026/08/17 12:00 a.m.16 views

curl security update

7.76.1-40.el98.5 - fix missing %patch macros for Patch46 and Patch47 7.76.1-40.el98.4 - fix HTTP Negotiate connection reuse auth bypass CVE-2026-1965 - fix OAuth2 bearer token leak via redirect and netrc CVE-2026-3783 - tests: disable flaky test 1206 on x8664 FTP PORT timeout under valgrind...

8.1CVSS6AI score0.00454EPSS
SaveExploits3
Tenable Nessus
Tenable Nessus
added 2026/08/12 12:00 a.m.17 views

Photon OS 5.0: Curl PHSA-2026-5.0-90-0951

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0951. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

9.8CVSS5.2AI score0.00688EPSS
SaveExploits16References17
SUSE Linux
SUSE Linux
added 2026/07/15 11:51 a.m.14 views

Security update for curl

This update for curl fixes the following issues CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. CVE-2026-8458: wrong reuse for different services bsc1268407. CVE-2026-8924: traling dot domain super cookie bsc1268409. CVE-2026-8927: env-set cross-proxy Digest auth state leak bsc1268413...

9.1CVSS6.1AI score0.00661EPSS
SaveExploits10References40
NVD
NVD
added 2026/07/03 7:16 a.m.18 views

CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

8.1CVSS0.00309EPSS
SaveExploits1References3
Rows per page
Query Builder