ROOT-OS-DEBIAN-12-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root

Root has patched CVE-2026-10536 in the curl package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root

Root has patched CVE-2026-10536 in the curl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-10536 CVE-2026-10536 in curl - Patched by Root

Root has patched CVE-2026-10536 in the curl package for Root:Alpine:3.20. Multiple fixed versions available...

Security Bulletin:Vulnerability in curl affects IBM Netezza Appliance

Summary The curl package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-10536 Vulnerability Details CVEID:CVE-2026-10536 DESCRIPTION: A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree...

Photon OS 5.0: Curl PHSA-2026-5.0-90-0951

An update of the curl package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-90-0951. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Security update for curl

This update for curl fixes the following issues CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. CVE-2026-8458: wrong reuse for different services bsc1268407. CVE-2026-8924: traling dot domain super cookie bsc1268409. CVE-2026-8927: env-set cross-proxy Digest auth state leak bsc1268413...

CVE-2026-10536

A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via CURLOPTSTREAMDEPENDS or CURLOPTSTREAMDEPENDSE, subsequently invokes curleasyreset, and finally terminates the handle with curleasycleanup. During this final cleanup phase, libcurl...

libcurl 7.88.0 < 8.21.0 HTTP/2 Stream-Dependency Tree Use-After-Free

The version of libcurl installed on the remote host is 7.88.0 prior to 8.21.0. It is, therefore, affected by a use-after-free vulnerability: - A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree and subsequently invokes curleasyreset...