Linuxsecurity Multiple Vulnerabilities Discovered in curl Affecting Ubuntu Systems
Article Content
- •curl vulnerabilities affect multiple Ubuntu LTS versions, including 18.04 to 26.04.
- •CVE-2026-8286 allows unintended TLS configurations during connection upgrades.
- •Users are urged to update their systems to mitigate security risks.
A series of vulnerabilities in curl have been identified, affecting multiple versions of Ubuntu, including 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS. The vulnerabilities allow remote attackers to exploit connection reuse and cookie parsing issues, potentially leading to unauthorized access and denial of service. Key vulnerabilities include CVE-2026-8286, which allows unintended TLS configurations during STARTTLS upgrades, and CVE-2026-8458, which enables access to resources authenticated for different services. Additionally, CVE-2026-8924 involves improper cookie handling that could expose users to third-party domains. The vulnerabilities have been patched, and users are advised to update their systems immediately.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (8)
Following this threat?
Track Ubuntu and CVE-2026-8286 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Curl Vulnerabilities in Ubuntu Fixed with USN-8487-2 The USN-8487-2 update addresses critical vulnerabilities in curl, particularly an incomplete fix for CVE-2026-8927 from the previous USN-8487-1. The vulnerabilities allow remote attackers to exploit connection reuse during STARTTLS upgrades and Negotiate-authenticated requests, potentially accessing unauthorized… 
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…