{"schema_version":1,"title":"Curl vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 66 vulnerabilities in Curl: 0 in the last 7 days and 33 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-94266, was published on 20 October 2026. 24 vulnerabilities in the last four weeks, up from none in the four before. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/curl","json_url":"https://junglewise.ai/threats/vendors/curl.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/curl","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":9,"all_time":66,"critical":3,"exploited":0,"last_7_days":0,"last_30_days":24,"last_90_days":33,"last_365_days":63},"latest":[{"cve":"CVE-2026-94266","slug":"cve-2026-94266-libcurl-could-accidentally-return-a-url-for-curl-easy-getinfo-s","title":"libcurl credentials leak in CURLINFO_EFFECTIVE_URL","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:22.29+00:00","url":"https://junglewise.ai/threats/cve-2026-94266-libcurl-could-accidentally-return-a-url-for-curl-easy-getinfo-s"},{"cve":"CVE-2026-94265","slug":"cve-2026-94265-when-processing-an-http-redirect-to-a-url-containing-userinfo-a","title":"curl Negotiate authentication credential exposure on redirect","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:22.183+00:00","url":"https://junglewise.ai/threats/cve-2026-94265-when-processing-an-http-redirect-to-a-url-containing-userinfo-a"},{"cve":"CVE-2026-92391","slug":"cve-2026-92391-a-deeply-nested-multipart-mime-structure-constructed-via-the","title":"curl stack overflow in MIME structure cleanup","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:21.92+00:00","url":"https://junglewise.ai/threats/cve-2026-92391-a-deeply-nested-multipart-mime-structure-constructed-via-the"},{"cve":"CVE-2026-92390","slug":"cve-2026-92390-when-invoked-with-remote-header-name-j-curl-fails-to-preserve-its","title":"curl remote-header-name file overwrite bypass","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:21.703+00:00","url":"https://junglewise.ai/threats/cve-2026-92390-when-invoked-with-remote-header-name-j-curl-fails-to-preserve-its"},{"cve":"CVE-2026-92389","slug":"cve-2026-92389-libcurl-s-tftp-state-machine-fails-to-validate-state-transitions","title":"libcurl TFTP direction confusion","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:21.457+00:00","url":"https://junglewise.ai/threats/cve-2026-92389-libcurl-s-tftp-state-machine-fails-to-validate-state-transitions"},{"cve":"CVE-2026-92388","slug":"cve-2026-92388-when-an-ftp-wildcard-list-operation-fails-libcurl-omits-the","title":"curl FTP wildcard write callback mixup","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:21.243+00:00","url":"https://junglewise.ai/threats/cve-2026-92388-when-an-ftp-wildcard-list-operation-fails-libcurl-omits-the"},{"cve":"CVE-2026-92387","slug":"cve-2026-92387-by-permanently-omitting-the-final-control-response-line-a","title":"curl infinite loop via server response omission","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:21.133+00:00","url":"https://junglewise.ai/threats/cve-2026-92387-by-permanently-omitting-the-final-control-response-line-a"},{"cve":"CVE-2026-92386","slug":"cve-2026-92386-when-writing-a-long-cookie-name-and-value-to-a-netscape-cookie","title":"curl server-set cookie aborts cookie jar load","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:21.017+00:00","url":"https://junglewise.ai/threats/cve-2026-92386-when-writing-a-long-cookie-name-and-value-to-a-netscape-cookie"},{"cve":"CVE-2026-87866","slug":"cve-2026-87866-when-built-with-wolfssl-curl-can-successfully-validate-a-pinned","title":"curl wolfSSL public-key pinning bypass","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:20.833+00:00","url":"https://junglewise.ai/threats/cve-2026-87866-when-built-with-wolfssl-curl-can-successfully-validate-a-pinned"},{"cve":"CVE-2026-87865","slug":"cve-2026-87865-when-libcurl-uses-libssh2-with-a-hashed-known-hosts-file-an","title":"curl libssh2 host key validation bypass with hashed known_hosts","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:20.693+00:00","url":"https://junglewise.ai/threats/cve-2026-87865-when-libcurl-uses-libssh2-with-a-hashed-known-hosts-file-an"},{"cve":"CVE-2026-87864","slug":"cve-2026-87864-enabling-curlopt-crlf-causes-curl-to-advertise-the-raw-input-byte","title":"curl IMAP APPEND plus CRLF conversion command injection","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:20.497+00:00","url":"https://junglewise.ai/threats/cve-2026-87864-enabling-curlopt-crlf-causes-curl-to-advertise-the-raw-input-byte"},{"cve":"CVE-2026-87863","slug":"cve-2026-87863-an-authenticated-https-origin-can-supply-an-hsts-max-age-value","title":"curl HSTS cache data loss on serialization failure","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:20.38+00:00","url":"https://junglewise.ai/threats/cve-2026-87863-an-authenticated-https-origin-can-supply-an-hsts-max-age-value"},{"cve":"CVE-2026-87862","slug":"cve-2026-87862-importing-a-includesubdomains-parent-hsts-entry-before-a-longer","title":"curl HSTS cache import drops longer-lived child","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:20.27+00:00","url":"https://junglewise.ai/threats/cve-2026-87862-importing-a-includesubdomains-parent-hsts-entry-before-a-longer"},{"cve":"CVE-2026-87861","slug":"cve-2026-87861-when-using-ambient-user-credentials-an-http-request-directed-to","title":"curl cross-origin reuse of Negotiate connection","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:20.167+00:00","url":"https://junglewise.ai/threats/cve-2026-87861-when-using-ambient-user-credentials-an-http-request-directed-to"},{"cve":"CVE-2026-86415","slug":"cve-2026-86415-libcurl-s-connection-cache-match-function-never-considers-the","title":"curl auto client cert connection reuse mixup","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:20.067+00:00","url":"https://junglewise.ai/threats/cve-2026-86415-libcurl-s-connection-cache-match-function-never-considers-the"},{"cve":"CVE-2026-86414","slug":"cve-2026-86414-an-http-proxy-can-trick-libcurl-into-sending-the-origin-s","title":"curl credential leak to HTTP proxy","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:19.947+00:00","url":"https://junglewise.ai/threats/cve-2026-86414-an-http-proxy-can-trick-libcurl-into-sending-the-origin-s"},{"cve":"CVE-2026-107929","slug":"cve-2026-107929-when-curlopt-interface-or-the-command-line-tool-s-interface","title":"curl local interface connection reuse mixup","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:15.593+00:00","url":"https://junglewise.ai/threats/cve-2026-107929-when-curlopt-interface-or-the-command-line-tool-s-interface"},{"cve":"CVE-2026-107928","slug":"cve-2026-107928-when-curl-is-built-with-gnutls-a-malicious-websocket-server-can","title":"curl information leak uploading over WebSockets with GnuTLS","severity":"info","exploited":false,"published_at":"2026-10-20T21:17:15.47+00:00","url":"https://junglewise.ai/threats/cve-2026-107928-when-curl-is-built-with-gnutls-a-malicious-websocket-server-can"},{"cve":"CVE-2026-86413","slug":"cve-2026-86413-when-using-an-ambient-user-in-a-first-transfer-doing-negotiate","title":"curl Negotiate authentication credential leakage on redirects","severity":"info","exploited":false,"published_at":"2026-10-20T20:17:25.787+00:00","url":"https://junglewise.ai/threats/cve-2026-86413-when-using-an-ambient-user-in-a-first-transfer-doing-negotiate"},{"cve":"CVE-2026-86412","slug":"cve-2026-86412-a-remote-http-server-can-set-a-cookie-that-curl-accepts-and","title":"curl cookie jar data loss via server-set oversized cookie","severity":"info","exploited":false,"published_at":"2026-10-20T20:17:25.667+00:00","url":"https://junglewise.ai/threats/cve-2026-86412-a-remote-http-server-can-set-a-cookie-that-curl-accepts-and"},{"cve":"CVE-2026-86411","slug":"cve-2026-86411-an-ftp-transfer-configured-with-curlusessl-none-can-reuse-a","title":"curl FTP connection reuse inherits client certificate","severity":"info","exploited":false,"published_at":"2026-10-20T20:17:25.533+00:00","url":"https://junglewise.ai/threats/cve-2026-86411-an-ftp-transfer-configured-with-curlusessl-none-can-reuse-a"},{"cve":"CVE-2026-86410","slug":"cve-2026-86410-a-flaw-in-the-curl-command-line-tool-s-logic-makes-it-only-set","title":"curl redirect to SFTP or SCP bypasses host verification","severity":"info","exploited":false,"published_at":"2026-10-20T20:17:25.38+00:00","url":"https://junglewise.ai/threats/cve-2026-86410-a-flaw-in-the-curl-command-line-tool-s-logic-makes-it-only-set"},{"cve":"CVE-2026-86409","slug":"cve-2026-86409-setting-curlopt-aws-sigv4-to-null-but-does-not-disable-sigv4","title":"curl stale SigV4 headers sent unintended","severity":"info","exploited":false,"published_at":"2026-10-20T20:17:25.223+00:00","url":"https://junglewise.ai/threats/cve-2026-86409-setting-curlopt-aws-sigv4-to-null-but-does-not-disable-sigv4"},{"cve":"CVE-2026-92392","cvss":8.1,"epss":0.0063,"slug":"cve-2026-92392-during-an-upload-curl-mishandles-http-2-rst-stream-received-from","title":"curl HTTP/2 upload use-after-free","severity":"high","exploited":false,"published_at":"2026-10-14T08:17:05.997+00:00","url":"https://junglewise.ai/threats/cve-2026-92392-during-an-upload-curl-mishandles-http-2-rst-stream-received-from"},{"cve":"CVE-2026-82209","cvss":8.2,"epss":0.0052,"slug":"cve-2026-82209-curl-public-suffix-list-domain-boundary-check-bypass-in-cookie","title":"curl Public Suffix List domain boundary check bypass in cookie handling","severity":"high","exploited":false,"published_at":"2026-09-06T18:17:22.847+00:00","url":"https://junglewise.ai/threats/cve-2026-82209-curl-public-suffix-list-domain-boundary-check-bypass-in-cookie"}],"vendor":{"hub":true,"name":"Curl","slug":"curl","homepage":"https://curl.se","description":"Command-line tool and library for transferring data over URLs.","url":"https://junglewise.ai/threats/vendors/curl"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":2,"exploited":0,"vulnerabilities":9},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":23},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-19931","cvss":9.8,"epss":0.0075,"slug":"cve-2026-19931-curl-negotiate-authentication-connection-reuse","title":"curl Negotiate authentication connection reuse","severity":"critical","exploited":false,"published_at":"2026-09-06T18:17:20.733+00:00","url":"https://junglewise.ai/threats/cve-2026-19931-curl-negotiate-authentication-connection-reuse"},{"cve":"CVE-2023-38545","cvss":9.8,"slug":"cve-2023-38545-curl-socks5-heap-buffer-overflow-during-handshake","title":"curl SOCKS5 heap buffer overflow during handshake","severity":"critical","exploited":false,"published_at":"2023-10-18T04:15:11.077+00:00","url":"https://junglewise.ai/threats/cve-2023-38545-curl-socks5-heap-buffer-overflow-during-handshake"},{"cve":"CVE-2026-18924","cvss":9.1,"epss":0.0058,"slug":"cve-2026-18924-curl-libcurl-http-2-server-push-use-after-free","title":"curl libcurl HTTP/2 server push use-after-free","severity":"critical","exploited":false,"published_at":"2026-09-06T18:17:20.553+00:00","url":"https://junglewise.ai/threats/cve-2026-18924-curl-libcurl-http-2-server-push-use-after-free"},{"cve":"CVE-2026-82209","cvss":8.2,"epss":0.0052,"slug":"cve-2026-82209-curl-public-suffix-list-domain-boundary-check-bypass-in-cookie","title":"curl Public Suffix List domain boundary check bypass in cookie handling","severity":"high","exploited":false,"published_at":"2026-09-06T18:17:22.847+00:00","url":"https://junglewise.ai/threats/cve-2026-82209-curl-public-suffix-list-domain-boundary-check-bypass-in-cookie"},{"cve":"CVE-2026-92392","cvss":8.1,"epss":0.0063,"slug":"cve-2026-92392-during-an-upload-curl-mishandles-http-2-rst-stream-received-from","title":"curl HTTP/2 upload use-after-free","severity":"high","exploited":false,"published_at":"2026-10-14T08:17:05.997+00:00","url":"https://junglewise.ai/threats/cve-2026-92392-during-an-upload-curl-mishandles-http-2-rst-stream-received-from"},{"cve":"CVE-2026-80231","cvss":7.5,"epss":0.009,"slug":"cve-2026-80231-curl-https-connection-reuse-with-mismatched-ca-store-settings","title":"curl HTTPS connection reuse with mismatched CA store settings","severity":"high","exploited":false,"published_at":"2026-09-06T18:17:22.5+00:00","url":"https://junglewise.ai/threats/cve-2026-80231-curl-https-connection-reuse-with-mismatched-ca-store-settings"},{"cve":"CVE-2026-80229","cvss":7.5,"epss":0.0087,"slug":"cve-2026-80229-curl-openssl-provider-use-after-free-in-tls-connections","title":"curl OpenSSL provider use-after-free in TLS connections","severity":"high","exploited":false,"published_at":"2026-09-06T18:17:22.217+00:00","url":"https://junglewise.ai/threats/cve-2026-80229-curl-openssl-provider-use-after-free-in-tls-connections"},{"cve":"CVE-2026-80255","cvss":7.5,"epss":0.0066,"slug":"cve-2026-80255-curl-secure-cookie-attribute-bypass-with-tab","title":"curl secure cookie attribute bypass with tab","severity":"high","exploited":false,"published_at":"2026-09-06T18:17:22.623+00:00","url":"https://junglewise.ai/threats/cve-2026-80255-curl-secure-cookie-attribute-bypass-with-tab"},{"cve":"CVE-2026-80230","cvss":7.5,"epss":0.0055,"slug":"cve-2026-80230-curl-public-key-pinning-bypass-with-disabled-peer-verification","title":"curl public key pinning bypass with disabled peer verification","severity":"high","exploited":false,"published_at":"2026-09-06T18:17:22.327+00:00","url":"https://junglewise.ai/threats/cve-2026-80230-curl-public-key-pinning-bypass-with-disabled-peer-verification"},{"cve":"CVE-2026-82208","cvss":7.5,"epss":0.0041,"slug":"cve-2026-82208-curl-libcurl-certificate-validation-bypass-in-wolfssl-backend","title":"curl libcurl certificate validation bypass in wolfSSL backend","severity":"high","exploited":false,"published_at":"2026-09-06T18:17:22.733+00:00","url":"https://junglewise.ai/threats/cve-2026-82208-curl-libcurl-certificate-validation-bypass-in-wolfssl-backend"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Curl","slug":"curl-curl","vulnerabilities":21,"url":"https://junglewise.ai/threats/technologies/curl-curl"},{"name":"Curl Libcurl","slug":"curl-libcurl","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/curl-libcurl"}]}