Linuxsecurity Multiple curl Vulnerabilities Expose Sensitive Information
Article Content
- •Multiple vulnerabilities in curl can expose sensitive information over the network.
- •Affected Ubuntu versions include 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS.
- •Users are urged to update their systems to the latest package versions to mitigate risks.
Multiple vulnerabilities have been discovered in curl, affecting various Ubuntu releases including 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS. These vulnerabilities allow remote attackers to potentially obtain sensitive information through improper connection handling. Specific issues include the incorrect reuse of non-TLS connections when TLS is required (CVE-2026-4873), HTTP Negotiate connections (CVE-2026-5545), and SMB connections (CVE-2026-5773). Additionally, curl could leak proxy credentials and other sensitive data under certain configurations (CVE-2026-6253, CVE-2026-6276, CVE-2026-6429, CVE-2026-7168). Users are advised to update their systems to mitigate these risks. The vulnerabilities were disclosed on May 4, 2026, and are considered serious due to the potential for information exposure.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Ubuntu and CVE-2026-4873 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…