← Back to feed Search feed

curl vulnerabilities

37 entries matching curl — updated 2026-11-02 · vulnfeed

CVE / IDTitleSeverityCVSSEPSSSourceDate
CVE-2026-119334Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. PriorLOW2.228%ileNVD2026-10-30
CVE-2026-87864IMAP APPEND plus CRLF conversion command injectionHIGH8.258%ileMicrosoft2026-10-13
CVE-2026-86414leaking host credentials to HTTP proxyHIGH7.552%ileMicrosoft2026-10-13
CVE-2026-87866wolfSSL public-key pinning bypassHIGH7.444%ileMicrosoft2026-10-13
CVE-2026-87863HSTS response erases persisted entriesMEDIUM6.558%ileMicrosoft2026-10-13
CVE-2026-86410redirect to SFTP or SCP bypasses host verificationMEDIUM5.956%ileMicrosoft2026-10-13
CVE-2026-92391curl_mime_free stack overflow by recursionMEDIUM5.567%ileMicrosoft2026-10-13
CVE-2026-92387never-ending loop via server response omissionMEDIUM5.364%ileMicrosoft2026-10-13
CVE-2026-87862HSTS cache import drops longer-lived childMEDIUM4.863%ileMicrosoft2026-10-13
CVE-2026-92386server-set cookie aborts cookie jar loadLOW3.758%ileMicrosoft2026-10-13
CVE-2026-107928info leak uploading over WebSockets with GnuTLSLOW3.753%ileMicrosoft2026-10-13
CVE-2026-82209domain-scoped PSL domain cookieHIGH8.231%ileMicrosoft2026-09-08
CVE-2026-82208wolfSSL CA-cache hit overrides callbackHIGH7.435%ileMicrosoft2026-09-08
CVE-2026-19931Negotiate ambient user conn reuseMEDIUM6.566%ileMicrosoft2026-09-08
CVE-2026-18924HTTP/2 server push UAFMEDIUM5.948%ileMicrosoft2026-09-08
CVE-2026-13608OpenLDAP SASL authentication bypassLOW3.743%ileMicrosoft2026-09-08
CVE-2026-80230OpenSSL pinning bypassLOW3.731%ileMicrosoft2026-09-08
CVE-2026-80231native CA store conn reuseLOW3.760%ileMicrosoft2026-09-08
CVE-2026-8924trailing dot domain super cookieCRITICAL9.152%ileMicrosoft2026-07-14
CVE-2026-8286wrong STARTTLS connection reuseHIGH8.124%ileMicrosoft2026-07-14
CVE-2026-8932incomplete mTLS config matching in conn reuseHIGH7.534%ileMicrosoft2026-07-14
CVE-2026-9545exposing HTTP/3 early dataHIGH7.535%ileMicrosoft2026-07-14
CVE-2026-12064proto-default skips SSH verificationHIGH7.436%ileMicrosoft2026-07-14
CVE-2026-8458wrong reuse for different servicesMEDIUM6.531%ileMicrosoft2026-07-14
CVE-2026-8926password leak with netrc and user in URLMEDIUM5.939%ileMicrosoft2026-07-14
CVE-2026-10536HTTP/2 stream-dependency tree UAFMEDIUM5.549%ileMicrosoft2026-07-14
CVE-2026-11856cross-origin Digest auth state leakMEDIUM5.353%ileMicrosoft2026-07-14
CVE-2026-8927env-set cross-proxy Digest auth state leakMEDIUM5.343%ileMicrosoft2026-07-14
CVE-2026-9079stale proxy password leakUNKNOWN—65%ileMicrosoft2026-07-14
CVE-2026-6276stale custom cookie host causes cookie leakHIGH7.522%ileMicrosoft2026-05-12
CVE-2026-5773wrong reuse of SMB connectionHIGH7.550%ileMicrosoft2026-05-12
CVE-2026-5545wrong reuse of HTTP Negotiate connectionMEDIUM6.536%ileMicrosoft2026-05-12
CVE-2026-4873connection reuse ignores TLS requirementMEDIUM5.926%ileMicrosoft2026-05-12
CVE-2026-6253proxy credentials leak over redirect-to proxyMEDIUM5.954%ileMicrosoft2026-05-12
CVE-2026-6429netrc credential leak with reused proxy connectionMEDIUM5.344%ileMicrosoft2026-05-12
CVE-2026-7168cross-proxy Digest auth state leakMEDIUM5.341%ileMicrosoft2026-05-12
CVE-2025-5025No QUIC certificate pinning with wolfSSLMEDIUM4.823%ileMicrosoft2025-05-13