CVE-2026-4873

CVE-2026-4873 affects curl/libcurl due to a connection pool reuse logic error : after a clear-text transfer via IMAP, SMTP, or POP3 , a subsequent request to the same host that requires TLS incorrectly reuses the unencrypted pooled connection, transmitting data in plaintext. The CVSS v3.1 score i...

connection reuse ignores TLS requirement

A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text via IMAP, SMTP, or POP3, a subsequent request to that same host bypasses the TLS requirement and instead transm...

clang-extra remote code execution vulnerability

clang-extra is a tool for installing LLVM. A security vulnerability exists in clang-extra, which originates when the program downloads an executable file over an unencrypted HTTP connection. A remote attacker can exploit the vulnerability by intercepting the response and replacing the requested...