7 matches found
ROOT-OS-ALPINE-322-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root
Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.22. Multiple fixed versions available...
ROOT-OS-DEBIAN-13-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root
Root has patched CVE-2026-8924 in the curl package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root
Root has patched CVE-2026-8924 in the curl package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-ALPINE-323-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root
Root has patched CVE-2026-8924 in the curl package for Root:Alpine:3.23. Multiple fixed versions available...
SUSE SLES15 Security Update : curl (SUSE-SU-2026:2926-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2926-1 advisory. This update for curl fixes the following issues - CVE-2026-8286: wrong STARTTLS connection reuse bsc1268402. - CVE-2026-8458: wrong...
CVE-2026-8924
A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains...