https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 05:52:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-05122 bdu:2026-05122 https://cve.radiocsirt.org/vuln/bdu:2026-05122 https://cve.radiocsirt.org/vuln/bell-cve-2025-14017 <p><strong>Affected:</strong> Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl</p> <p><strong>Affected:</strong> Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl</p> https://cve.radiocsirt.org/vuln/bell-cve-2025-14017 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0010 certfr-2026-avi-0010 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0010 https://cve.radiocsirt.org/vuln/euvd-2026-368394 EUVD-2026-368394 https://cve.radiocsirt.org/vuln/euvd-2026-368394 https://cve.radiocsirt.org/vuln/fkie_cve-2025-14017 <p>When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.</p> <p>Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.</p> <p>When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.</p> <p>Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-14017 https://cve.radiocsirt.org/vuln/ghsa-jh4h-2cg6-889h <p>When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.</p> <p>Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.</p> <p>When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.</p> <p>Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.</p> https://cve.radiocsirt.org/vuln/ghsa-jh4h-2cg6-889h https://cve.radiocsirt.org/vuln/msrc_cve-2025-14017 msrc_CVE-2025-14017 https://cve.radiocsirt.org/vuln/msrc_cve-2025-14017 https://cve.radiocsirt.org/vuln/ncsc-2026-0127 NCSC-2026-0127 https://cve.radiocsirt.org/vuln/ncsc-2026-0127 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10017-1 <p>curl-8.18.0-1.1 on GA media</p> <p>curl-8.18.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10017-1 https://cve.radiocsirt.org/vuln/rhsa-2026:6893 <p>curl: libcurl: Curl out of bounds read for cookie path curl: predictable WebSocket mask curl: Curl missing SFTP host verification with wolfSSH backend curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token curl: libcurl: Improper certificate validation due to cached TLS settings reuse curl: Host verification bypass during SSH transfers curl: libssh key passphrase bypass without agent set curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect curl: curl: Unauthorized access due to improper HTTP proxy connection reuse curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling</p> <p>curl: libcurl: Curl out of bounds read for cookie path curl: predictable WebSocket mask curl: Curl missing SFTP host verification with wolfSSH backend curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token curl: libcurl: Improper certificate validation due to cached TLS settings reuse curl: Host verification bypass during SSH transfers curl: libssh key passphrase bypass without agent set curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect curl: curl: Unauthorized access due to improper HTTP proxy connection reuse curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling</p> https://cve.radiocsirt.org/vuln/rhsa-2026:6893 https://cve.radiocsirt.org/vuln/suse-su-2026:0077-1 <p>Security update for curl</p> <p>Security update for curl</p> https://cve.radiocsirt.org/vuln/suse-su-2026:0077-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14017 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: curl, Ubuntu:Pro:16.04:LTS: curl, Ubuntu:Pro:18.04:LTS: curl, Ubuntu:Pro:20.04:LTS: curl, Ubuntu:22.04:LTS: curl, Ubuntu:24.04:LTS: curl, Ubuntu:25.10: curl</p> <p>When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: curl, Ubuntu:Pro:16.04:LTS: curl, Ubuntu:Pro:18.04:LTS: curl, Ubuntu:Pro:20.04:LTS: curl, Ubuntu:22.04:LTS: curl, Ubuntu:24.04:LTS: curl, Ubuntu:25.10: curl</p> <p>When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers. Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-14017 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0030 <p>Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder vertrauliche Informationen offenzulegen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0030