curl curl

• CVE-2026-107929 High 8.1 local interface connection reuse mixup 0.7%
• CVE-2026-107928 High 8.1 info leak uploading over WebSockets with GnuTLS 0.7%
• CVE-2026-94266 High 7.5 password leak in CURLINFO_EFFECTIVE_URL 0.6%
• CVE-2026-94265 Critical 9.1 Authorization: Negotiate sent to foreign origin 0.8%
• CVE-2026-92391 High 7.5 curl_mime_free stack overflow by recursion 1.2%
• CVE-2026-92390 High 7.5 -J no-clobber guarantee bypassed with 103 early hints 0.6%
• CVE-2026-92389 High 8.1 TFTP direction confusion 0.7%
• CVE-2026-92388 Critical 9.1 FTP wildcard write callback mixup 0.7%
• CVE-2026-92387 High 8.1 never-ending loop via server response omission 1.0%
• CVE-2026-92386 High 8.1 server-set cookie aborts cookie jar load 0.8%
• CVE-2026-87866 Critical 9.1 wolfSSL public-key pinning bypass 0.5%
• CVE-2026-87865 High 7.4 knownhost callback mismatches key as missing 0.6%
• CVE-2026-87863 High 8.1 HSTS response erases persisted entries 0.8%
• CVE-2026-87864 High 8.1 IMAP APPEND plus CRLF conversion command injection 0.8%
• CVE-2026-87862 High 8.1 HSTS cache import drops longer-lived child 1.0%
• CVE-2026-87861 Critical 9.1 cross-origin reuse of a Negotiate connection 0.7%
• CVE-2026-86415 High 7.5 auto client cert connection reuse mixup 0.4%
• CVE-2026-86414 Critical 9.1 leaking host credentials to HTTP proxy 0.7%
• CVE-2026-86413 Critical 9.1 Negotiate credentials sent to redirected origin 0.7%
• CVE-2026-86412 High 8.1 server-set cookie erases cookie jar 0.8%
• CVE-2026-86411 Critical 9.1 FTP connection reuse inherits client-certificate 0.4%
• CVE-2026-86410 High 8.1 redirect to SFTP or SCP bypasses host verification 0.8%
• CVE-2026-86409 High 8.1 stale SigV4 headers sent unintended 1.1%
• CVE-2026-92392 High 8.1 HTTP/2 upload Use-After-Free 1.3%
• CVE-2026-82209 High 8.2 domain-scoped PSL domain cookie 0.4%
• CVE-2026-82208 High 7.5 wolfSSL CA-cache hit overrides callback 0.4%
• CVE-2026-80255 High 7.5 secure cookie attribute bypass with tab 0.5%
• CVE-2026-80231 High 7.5 native CA store conn reuse 0.9%
• CVE-2026-80230 High 7.5 OpenSSL pinning bypass 0.4%
• CVE-2026-80229 High 7.5 OpenSSL provider use-after-free 0.6%
• CVE-2026-19931 Critical 9.8 Negotiate ambient user conn reuse 0.7%
• CVE-2026-18924 Critical 9.1 HTTP/2 server push UAF 0.6%
• CVE-2026-13608 High 7.4 OpenLDAP SASL authentication bypass 0.5%
• CVE-2026-9547 High 7.4 SSH improper host validation 0.4%
• CVE-2026-9546 High 7.5 sending old referer 0.7%
• CVE-2026-9545 High 7.5 exposing HTTP/3 early data 0.4%
• CVE-2026-9080 High 7.3 UAF after pause in socket callback 0.5%
• CVE-2026-9079 Critical 9.8 stale proxy password leak 1.1%
• CVE-2026-8932 High 7.5 incomplete mTLS config matching in conn reuse 0.4%
• CVE-2026-8927 Critical 9.1 env-set cross-proxy Digest auth state leak 0.5%
• CVE-2026-8926 Critical 9.1 password leak with netrc and user in URL 0.4%
• CVE-2026-8925 Critical 9.8 SASL double-free 1.1%
• CVE-2026-8924 Critical 9.1 trailing dot domain super cookie 0.7%
• CVE-2026-8458 Medium 6.5 wrong reuse for different services 0.4%
• CVE-2026-8286 High 8.1 wrong STARTTLS connection reuse 0.3%
• CVE-2026-12064 High 7.5 proto-default skips SSH verification 0.4%
• CVE-2026-11856 Critical 9.8 cross-origin Digest auth state leak 0.7%
• CVE-2026-11586 High 7.5 WS Auto-PONG memory exhaustion 0.9%
• CVE-2026-11564 Critical 9.1 Native CA trust persist 0.6%
• CVE-2026-11352 High 7.5 QUIC zero-length UDP datagrams busy-loop 1.0%