https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 11:55:29 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08696 bdu:2026-08696 https://cve.radiocsirt.org/vuln/bdu:2026-08696 https://cve.radiocsirt.org/vuln/bell-cve-2026-10536 <p><strong>Affected:</strong> Alpaquita:23: curl, Alpaquita:25: curl, Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl</p> <p><strong>Affected:</strong> Alpaquita:23: curl, Alpaquita:25: curl, Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-10536 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0797 certfr-2026-avi-0797 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0797 https://cve.radiocsirt.org/vuln/euvd-2026-368400 EUVD-2026-368400 https://cve.radiocsirt.org/vuln/euvd-2026-368400 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10536 <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.</p> <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-10536 https://cve.radiocsirt.org/vuln/ghsa-wjq8-x4qm-6mmh <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.</p> <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.</p> https://cve.radiocsirt.org/vuln/ghsa-wjq8-x4qm-6mmh https://cve.radiocsirt.org/vuln/msrc_cve-2026-10536 msrc_CVE-2026-10536 https://cve.radiocsirt.org/vuln/msrc_cve-2026-10536 https://cve.radiocsirt.org/vuln/oesa-2026-2986 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: curl</p> <p>cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols. Security Fix(es):</p> <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.(CVE-2026-10536)</p> <p>When a user invokes curl using a schemeless URL combined with `--proto-default` sftp (or scp), a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like CURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 and CURLOPT_SSH_KNOWNHOSTS. Conversely, the libcurl runtime successfully honors CURLOPT_DEFAULT_PROTOCOL and establishes the connection via SFTP/SCP as specified. Because the tool layer skipped the security configuration, these SSH host verification options are silently omitted, causing curl to connect to an unverified SSH remote host without throwing an error.(CVE-2026-12064)</p> <p>A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.(CVE-…</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: curl</p> <p>cURL is a computer software project providing a library (libcurl) and command-line tool (curl) for transferring data using various protocols. Security Fix(es):</p> <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.(CVE-2026-10536)</p> <p>When a user invokes curl using a schemeless URL combined with `--proto-default` sftp (or scp), a disconnect occurs between the tool layer and libcurl. The tool layer incorrectly infers the URL scheme, which erroneously bypasses the initialization of critical SSH security options like CURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 and CURLOPT_SSH_KNOWNHOSTS. Conversely, the libcurl runtime successfully honors CURLOPT_DEFAULT_PROTOCOL and establishes the connection via SFTP/SCP as specified. Because the tool layer skipped the security configuration, these SSH host verification options are silently omitted, causing curl to connect to an unverified SSH remote host without throwing an error.(CVE-2026-12064)</p> <p>A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.(CVE-…</p> https://cve.radiocsirt.org/vuln/oesa-2026-2986 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11230-1 <p>curl-8.21.0-1.1 on GA media</p> <p>curl-8.21.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11230-1 https://cve.radiocsirt.org/vuln/rhsa-2026:41240 <p>libcurl: libcurl: Information disclosure via cached SSL session and early data libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests</p> <p>libcurl: libcurl: Information disclosure via cached SSL session and early data libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests</p> https://cve.radiocsirt.org/vuln/rhsa-2026:41240 https://cve.radiocsirt.org/vuln/suse-su-2026:22553-1 <p>Security update for curl</p> <p>Security update for curl</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22553-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10536 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: curl, Ubuntu:25.10: curl, Ubuntu:26.04:LTS: curl</p> <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: curl, Ubuntu:25.10: curl, Ubuntu:26.04:LTS: curl</p> <p>A use-after-free vulnerability exists in libcurl when an application configures an HTTP/2 stream-dependency tree via `CURLOPT_STREAM_DEPENDS` or `CURLOPT_STREAM_DEPENDS_E`, subsequently invokes `curl_easy_reset()`, and finally terminates the handle with `curl_easy_cleanup()`. During this final cleanup phase, libcurl attempts to access and modify an internal structure that was already freed during the reset operation.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10536 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2052 <p>Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2052