ALPINE-CVE-2026-9547

When a libcurl-based application performs transfers via SCP:// or SFTP:// and utilizes the CURLOPTSSHKEYFUNCTION callback, it may silently accept an untrusted server. This vulnerability occurs when a server presents a host key type that does not match the specific key type already recorded for th...

ALPINE-CVE-2026-9546

A vulnerability in libcurl caused the HTTP Referer: header to persist even when explicitly cleared. While the documentation states that passing NULL to CURLOPTREFERER suppresses the header, the option failed to clear the internal state. As a result, the previous referrer string was erroneously...

CVE-2026-8458

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services". libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When...

CVE-2026-54407

creationtimestamp| type| source ---|---|--- 2026-07-03 07:04:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppy6zuy2o2c 2026-07-08 11:01:21+00:00| seen| https://vulnerability.circl.lu/bundle/ebad18a5-251f-49a4-b877-c63995fd13a6 2026-07-13 03:07:06+00:00| seen|...

CVE-2026-9079

libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them...

CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not...

CVE-2026-12064

When a user invokes curl using a schemeless URL combined with --proto-default sftp or scp, a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like...

CVE-2026-11856

Successfully using libcurl to do a transfer to a specific HTTP origin hostA with Digest authentication and then changing the origin to a different one hostB for a second transfer, reusing the same handle, makes libcurl wrongly pass on the Authorization: header field meant for hostA, to hostB...

CVE-2026-8892

creationtimestamp| type| source ---|---|--- 2026-07-03 05:54:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppubpfkjl2o 2026-07-03 19:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mprb2urwmh2b 2026-07-03 20:51:06+00:00| seen|...

CVE-2026-10140

creationtimestamp| type| source ---|---|--- 2026-07-03 05:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpptcdyxjl2i 2026-07-03 07:32:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppzrbt4q727 2026-07-09 01:47:27+00:00| seen|...

CVE-2026-58652

creationtimestamp| type| source ---|---|--- 2026-07-03 04:04:20+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppo4hmy6r2j 2026-07-03 10:25:57+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpqdguittd2n...

CVE-2025-69134

creationtimestamp| type| source ---|---|--- 2026-07-03 03:23:18+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpplt3fz2726 2026-08-01 12:44:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrziombw4z2x...

CVE-2026-13373

creationtimestamp| type| source ---|---|--- 2026-07-03 03:16:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpplhrjxmc2i 2026-07-03 19:00:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpra6phkd22u...

SUSE CVE-2026-53118

In the Linux kernel, the following vulnerability has been resolved: vdpa: use generic driveroverride infrastructure When a driver is probed through driverattach, the bus' match callback is called without the device lock held, thus accessing the driveroverride field without a lock, which can cause...

SUSE CVE-2026-55594

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-51 and 7.1.2-26, a missing depth check in the MVG decoder will result in a stack overflow when a crafted image is provided. This issue has been fixed in versions 6.9.13-51 and...

GHSA-84HP-MQVJ-3P8H

creationtimestamp| type| source ---|---|--- 2026-07-03 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116853809243699371 2026-07-03 03:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mppkkiqr622k...

CVE-2026-10134

creationtimestamp| type| source ---|---|--- 2026-07-03 02:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mppjaj2iin2r 2026-07-04 02:15:17+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpryifbgxm2k 2026-07-09 01:47:27+00:00| seen|...

CVE-2026-13053

creationtimestamp| type| source ---|---|--- 2026-07-03 02:28:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mppirwdfub2s 2026-07-03 18:54:31+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpr7uahbt623 2026-07-10 17:36:59+00:00| seen|...

CVE-2026-7840

creationtimestamp| type| source ---|---|--- 2026-07-03 02:25:18+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mppilesqv727 2026-07-09 11:43:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mq7klorntc2s 2026-08-03 21:00:18+00:00| seen|...

CVE-2026-57681

creationtimestamp| type| source ---|---|--- 2026-07-03 00:36:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppcis3pe72d 2026-07-31 02:44:09+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mrvwotwgd72g...