CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1450618 matches found

NVD•added 2026/09/06 6:17 p.m.•9 views

CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting CURLSSLOPTNATIVECA than when the connection was created...

7.5CVSS0.00937EPSS

SaveExploits1References3

OSV•added 2026/09/06 6:17 p.m.•6 views

DEBIAN-CVE-2026-82209

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a Set-Cookie header where the Domain attribute explicitly matches an origin host that is itself a public suffix e.g., Domain=co.uk set by co.uk. Instead of coercing it into a strict...

8.2CVSS5.9AI score0.0054EPSS

SaveExploits1References1

OSV•added 2026/09/06 6:17 p.m.•7 views

DEBIAN-CVE-2026-80230

When CURLOPTPINNEDPUBLICKEY is configured alongside options that disable standard peer verification CURLOPTSSLVERIFYPEER = 0 and CURLOPTSSLVERIFYHOST = 0, libcurl fails to enforce public key pinning on connections established without a presented server certificate. Bypassing the pinning check und...

7.5CVSS5.7AI score0.00566EPSS

SaveExploits1References1

OSV•added 2026/09/06 6:17 p.m.•8 views

DEBIAN-CVE-2026-19931

A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make user B's request get sent over user A's previously authenticated connection...

9.8CVSS5.7AI score0.01162EPSS

SaveExploits1References1

OSV•added 2026/09/06 6:17 p.m.•12 views

UBUNTU-CVE-2026-82209

8.2CVSS5.9AI score0.0054EPSS

SaveExploits1References4

OSV•added 2026/09/06 3:27 p.m.•7 views

MINI-CPVM-JQC8-6RHJ