2 matches found
libcurl 8.17.0 < 8.21.0 Native CA Trust Persist
The version of libcurl installed on the remote host is 8.17.0 prior to 8.21.0. It is, therefore, affected by an improper certificate validation vulnerability: - An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches th...
9.1CVSS6AI score0.00363EPSS
SaveExploits1References2
curl: CVE-2026-11564: Native CA trust persist
A vulnerability was discovered in the libcurl library where a native CA trust could persist after an easy handle switches to custom CA material. The vulnerability was found to affect builds of libcurl that enable the native CA trust feature. The issue stemmed from the fact that the library did no...
9.1CVSS5.8AI score0.00363EPSS
SaveExploits1
20