CVE-2026-87864

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 14, 2026

Last Seen

October 15, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

curl 8.23.0 Fixes High-Severity HTTP/2 Upload Flaw64.5

On October 14, 2026, curl released version 8.23.0 to address a critical use-after-free vulnerability (CVE-2026-92392) affecting versions 8.12.0 to 8.22.0. This flaw allows a malicious HTTP/2 server to execute code on the client's machine during file uploads, requiring specific conditions to be met....