Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
On September 8, 2026, Fedora released updates addressing critical vulnerabilities in curl affecting versions 44 and 43. The vulnerabilities include a use-after-free issue (CVE-2026-10536), a proxy password leak (CVE-2026-9079), a certificate validation bypass (CVE-2026-11564), and unauthorized conne...
The USN-8487-2 update addresses critical vulnerabilities in curl, particularly an incomplete fix for CVE-2026-8927 from the previous USN-8487-1. The vulnerabilities allow remote attackers to exploit connection reuse during STARTTLS upgrades and Negotiate-authenticated requests, potentially accessing...
A series of vulnerabilities in curl have been identified, affecting multiple versions of Ubuntu, including 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS. The vulnerabilities allow remote attackers to exploit connection reuse and cookie parsing issues, potentially leading to unauth...
