Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Oracle has released important updates for its curl software, addressing multiple vulnerabilities. The updates include fixes for CVE-2026-1965 and CVE-2026-3783, which involve HTTP Negotiate connection reuse and OAuth2 bearer token leaks, respectively. Additionally, CVE-2026-9547 and CVE-2026-8286 ar...
The USN-8487-2 update addresses critical vulnerabilities in curl, particularly an incomplete fix for CVE-2026-8927 from the previous USN-8487-1. The vulnerabilities allow remote attackers to exploit connection reuse during STARTTLS upgrades and Negotiate-authenticated requests, potentially accessing...
A series of vulnerabilities in curl have been identified, affecting multiple versions of Ubuntu, including 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS. The vulnerabilities allow remote attackers to exploit connection reuse and cookie parsing issues, potentially leading to unauth...
