https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:51:45 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2026-9545 <p><strong>Affected:</strong> Alpaquita:23: curl, Alpaquita:25: curl, Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl</p> <p><strong>Affected:</strong> Alpaquita:23: curl, Alpaquita:25: curl, Alpaquita:stream: curl, BellSoft Hardened Containers:stream: curl</p> https://cve.radiocsirt.org/vuln/bell-cve-2026-9545 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0797 certfr-2026-avi-0797 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0797 https://cve.radiocsirt.org/vuln/euvd-2026-368435 EUVD-2026-368435 https://cve.radiocsirt.org/vuln/euvd-2026-368435 https://cve.radiocsirt.org/vuln/fkie_cve-2026-9545 <p>In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker&#39;s impostor machine - without a valid certificate.</p> <p>When libcurl returns to the hostname the second time with a cached SSL session (`CURLOPT_SSL_SESSIONID_CACHE` is not disabled) and early data enabled (the `CURLSSLOPT_EARLYDATA` bit is set in `CURLOPT_SSL_OPTIONS`), libcurl might send off the second request&#39;s bytes on that new connection *before* enforcing the certificate verification failure. Potentially leaking sensitive information.</p> <p>In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker&#39;s impostor machine - without a valid certificate.</p> <p>When libcurl returns to the hostname the second time with a cached SSL session (`CURLOPT_SSL_SESSIONID_CACHE` is not disabled) and early data enabled (the `CURLSSLOPT_EARLYDATA` bit is set in `CURLOPT_SSL_OPTIONS`), libcurl might send off the second request&#39;s bytes on that new connection *before* enforcing the certificate verification failure. Potentially leaking sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-9545 https://cve.radiocsirt.org/vuln/ghsa-6v72-wfcj-jv53 <p>In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker&#39;s impostor machine - without a valid certificate.</p> <p>When libcurl returns to the hostname the second time with a cached SSL session (`CURLOPT_SSL_SESSIONID_CACHE` is not disabled) and early data enabled (the `CURLSSLOPT_EARLYDATA` bit is set in `CURLOPT_SSL_OPTIONS`), libcurl might send off the second request&#39;s bytes on that new connection *before* enforcing the certificate verification failure. Potentially leaking sensitive information.</p> <p>In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker&#39;s impostor machine - without a valid certificate.</p> <p>When libcurl returns to the hostname the second time with a cached SSL session (`CURLOPT_SSL_SESSIONID_CACHE` is not disabled) and early data enabled (the `CURLSSLOPT_EARLYDATA` bit is set in `CURLOPT_SSL_OPTIONS`), libcurl might send off the second request&#39;s bytes on that new connection *before* enforcing the certificate verification failure. Potentially leaking sensitive information.</p> https://cve.radiocsirt.org/vuln/ghsa-6v72-wfcj-jv53 https://cve.radiocsirt.org/vuln/msrc_cve-2026-9545 msrc_CVE-2026-9545 https://cve.radiocsirt.org/vuln/msrc_cve-2026-9545 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11230-1 <p>curl-8.21.0-1.1 on GA media</p> <p>curl-8.21.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:11230-1 https://cve.radiocsirt.org/vuln/rhsa-2026:41240 <p>libcurl: libcurl: Information disclosure via cached SSL session and early data libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests</p> <p>libcurl: libcurl: Information disclosure via cached SSL session and early data libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests</p> https://cve.radiocsirt.org/vuln/rhsa-2026:41240 https://cve.radiocsirt.org/vuln/suse-su-2026:22553-1 <p>Security update for curl</p> <p>Security update for curl</p> https://cve.radiocsirt.org/vuln/suse-su-2026:22553-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9545 <p><strong>Affected:</strong> Ubuntu:25.10: curl, Ubuntu:26.04:LTS: curl</p> <p>In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker&#39;s impostor machine - without a valid certificate. When libcurl returns to the hostname the second time with a cached SSL session (`CURLOPT_SSL_SESSIONID_CACHE` is not disabled) and early data enabled (the `CURLSSLOPT_EARLYDATA` bit is set in `CURLOPT_SSL_OPTIONS`), libcurl might send off the second request&#39;s bytes on that new connection *before* enforcing the certificate verification failure. Potentially leaking sensitive information.</p> <p><strong>Affected:</strong> Ubuntu:25.10: curl, Ubuntu:26.04:LTS: curl</p> <p>In this scenario, libcurl first uses a proper HTTP/3 server for the initial transfers, and when it makes a second transfer to the same site it has been replaced by the attacker&#39;s impostor machine - without a valid certificate. When libcurl returns to the hostname the second time with a cached SSL session (`CURLOPT_SSL_SESSIONID_CACHE` is not disabled) and early data enabled (the `CURLSSLOPT_EARLYDATA` bit is set in `CURLOPT_SSL_OPTIONS`), libcurl might send off the second request&#39;s bytes on that new connection *before* enforcing the certificate verification failure. Potentially leaking sensitive information.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-9545 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2052 <p>Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand oder eine Speicherbeschädigung zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2052