# cve.now: Curl

The newest entries naming Curl as an affected vendor (up to 200), of 98 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-107929](https://cve.now/CVE-2026-107929.md): local interface connection reuse mixup (CVSS 8.1)
- [CVE-2026-107928](https://cve.now/CVE-2026-107928.md): info leak uploading over WebSockets with GnuTLS (CVSS 8.1)
- [CVE-2026-94266](https://cve.now/CVE-2026-94266.md): password leak in CURLINFO\_EFFECTIVE\_URL (CVSS 7.5)
- [CVE-2026-94265](https://cve.now/CVE-2026-94265.md): Authorization: Negotiate sent to foreign origin (CVSS 9.1)
- [CVE-2026-92391](https://cve.now/CVE-2026-92391.md): curl\_mime\_free stack overflow by recursion (CVSS 7.5)
- [CVE-2026-92390](https://cve.now/CVE-2026-92390.md): -J no-clobber guarantee bypassed with 103 early hints (CVSS 7.5)
- [CVE-2026-92389](https://cve.now/CVE-2026-92389.md): TFTP direction confusion (CVSS 8.1)
- [CVE-2026-92388](https://cve.now/CVE-2026-92388.md): FTP wildcard write callback mixup (CVSS 9.1)
- [CVE-2026-92387](https://cve.now/CVE-2026-92387.md): never-ending loop via server response omission (CVSS 8.1)
- [CVE-2026-92386](https://cve.now/CVE-2026-92386.md): server-set cookie aborts cookie jar load (CVSS 8.1)
- [CVE-2026-87866](https://cve.now/CVE-2026-87866.md): wolfSSL public-key pinning bypass (CVSS 9.1)
- [CVE-2026-87865](https://cve.now/CVE-2026-87865.md): knownhost callback mismatches key as missing (CVSS 7.4)
- [CVE-2026-87863](https://cve.now/CVE-2026-87863.md): HSTS response erases persisted entries (CVSS 8.1)
- [CVE-2026-87864](https://cve.now/CVE-2026-87864.md): IMAP APPEND plus CRLF conversion command injection (CVSS 8.1)
- [CVE-2026-87862](https://cve.now/CVE-2026-87862.md): HSTS cache import drops longer-lived child (CVSS 8.1)
- [CVE-2026-87861](https://cve.now/CVE-2026-87861.md): cross-origin reuse of a Negotiate connection (CVSS 9.1)
- [CVE-2026-86415](https://cve.now/CVE-2026-86415.md): auto client cert connection reuse mixup (CVSS 7.5)
- [CVE-2026-86414](https://cve.now/CVE-2026-86414.md): leaking host credentials to HTTP proxy (CVSS 9.1)
- [CVE-2026-86413](https://cve.now/CVE-2026-86413.md): Negotiate credentials sent to redirected origin (CVSS 9.1)
- [CVE-2026-86412](https://cve.now/CVE-2026-86412.md): server-set cookie erases cookie jar (CVSS 8.1)
- [CVE-2026-86411](https://cve.now/CVE-2026-86411.md): FTP connection reuse inherits client-certificate (CVSS 9.1)
- [CVE-2026-86410](https://cve.now/CVE-2026-86410.md): redirect to SFTP or SCP bypasses host verification (CVSS 8.1)
- [CVE-2026-86409](https://cve.now/CVE-2026-86409.md): stale SigV4 headers sent unintended (CVSS 8.1)
- [CVE-2026-92392](https://cve.now/CVE-2026-92392.md): HTTP/2 upload Use-After-Free (CVSS 8.1)
- [CVE-2026-82209](https://cve.now/CVE-2026-82209.md): domain-scoped PSL domain cookie (CVSS 8.2)
- [CVE-2026-82208](https://cve.now/CVE-2026-82208.md): wolfSSL CA-cache hit overrides callback (CVSS 7.5)
- [CVE-2026-80255](https://cve.now/CVE-2026-80255.md): secure cookie attribute bypass with tab (CVSS 7.5)
- [CVE-2026-80231](https://cve.now/CVE-2026-80231.md): native CA store conn reuse (CVSS 7.5)
- [CVE-2026-80230](https://cve.now/CVE-2026-80230.md): OpenSSL pinning bypass (CVSS 7.5)
- [CVE-2026-80229](https://cve.now/CVE-2026-80229.md): OpenSSL provider use-after-free (CVSS 7.5)
- [CVE-2026-19931](https://cve.now/CVE-2026-19931.md): Negotiate ambient user conn reuse (CVSS 9.8)
- [CVE-2026-18924](https://cve.now/CVE-2026-18924.md): HTTP/2 server push UAF (CVSS 9.1)
- [CVE-2026-13608](https://cve.now/CVE-2026-13608.md): OpenLDAP SASL authentication bypass (CVSS 7.4)
- [CVE-2026-9547](https://cve.now/CVE-2026-9547.md): SSH improper host validation (CVSS 7.4)
- [CVE-2026-9546](https://cve.now/CVE-2026-9546.md): sending old referer (CVSS 7.5)
- [CVE-2026-9545](https://cve.now/CVE-2026-9545.md): exposing HTTP/3 early data (CVSS 7.5)
- [CVE-2026-9080](https://cve.now/CVE-2026-9080.md): UAF after pause in socket callback (CVSS 7.3)
- [CVE-2026-9079](https://cve.now/CVE-2026-9079.md): stale proxy password leak (CVSS 9.8)
- [CVE-2026-8932](https://cve.now/CVE-2026-8932.md): incomplete mTLS config matching in conn reuse (CVSS 7.5)
- [CVE-2026-8927](https://cve.now/CVE-2026-8927.md): env-set cross-proxy Digest auth state leak (CVSS 9.1)
- [CVE-2026-8926](https://cve.now/CVE-2026-8926.md): password leak with netrc and user in URL (CVSS 9.1)
- [CVE-2026-8925](https://cve.now/CVE-2026-8925.md): SASL double-free (CVSS 9.8)
- [CVE-2026-8924](https://cve.now/CVE-2026-8924.md): trailing dot domain super cookie (CVSS 9.1)
- [CVE-2026-8458](https://cve.now/CVE-2026-8458.md): wrong reuse for different services (CVSS 6.5)
- [CVE-2026-8286](https://cve.now/CVE-2026-8286.md): wrong STARTTLS connection reuse (CVSS 8.1)
- [CVE-2026-12064](https://cve.now/CVE-2026-12064.md): proto-default skips SSH verification (CVSS 7.5)
- [CVE-2026-11856](https://cve.now/CVE-2026-11856.md): cross-origin Digest auth state leak (CVSS 9.8)
- [CVE-2026-11586](https://cve.now/CVE-2026-11586.md): WS Auto-PONG memory exhaustion (CVSS 7.5)
- [CVE-2026-11564](https://cve.now/CVE-2026-11564.md): Native CA trust persist (CVSS 9.1)
- [CVE-2026-11352](https://cve.now/CVE-2026-11352.md): QUIC zero-length UDP datagrams busy-loop (CVSS 7.5)
- [CVE-2026-10536](https://cve.now/CVE-2026-10536.md): HTTP/2 stream-dependency tree UAF (CVSS 9.8)
- [CVE-2026-7168](https://cve.now/CVE-2026-7168.md): cross-proxy Digest auth state leak (CVSS 5.3)
- [CVE-2026-7009](https://cve.now/CVE-2026-7009.md): OCSP stapling bypass with Apple SecTrust (CVSS 5.3)
- [CVE-2026-6429](https://cve.now/CVE-2026-6429.md): netrc credential leak with reused proxy connection (CVSS 5.3)
- [CVE-2026-6276](https://cve.now/CVE-2026-6276.md): stale custom cookie host causes cookie leak (CVSS 7.5)
- [CVE-2026-6253](https://cve.now/CVE-2026-6253.md): proxy credentials leak over redirect-to proxy (CVSS 5.9)
- [CVE-2026-5773](https://cve.now/CVE-2026-5773.md): wrong reuse of SMB connection (CVSS 7.5)
- [CVE-2026-5545](https://cve.now/CVE-2026-5545.md): wrong reuse of HTTP Negotiate connection (CVSS 6.5)
- [CVE-2026-4873](https://cve.now/CVE-2026-4873.md): connection reuse ignores TLS requirement (CVSS 5.9)
- [CVE-2026-3805](https://cve.now/CVE-2026-3805.md): use after free in SMB connection reuse (CVSS 7.5)
- [CVE-2026-3784](https://cve.now/CVE-2026-3784.md): wrong proxy connection reuse with credentials (CVSS 6.5)
- [CVE-2026-3783](https://cve.now/CVE-2026-3783.md): token leak with redirect and netrc (CVSS 5.3)
- [CVE-2026-1965](https://cve.now/CVE-2026-1965.md): bad reuse of HTTP Negotiate connection (CVSS 6.5)
- [CVE-2025-11563](https://cve.now/CVE-2025-11563.md): wcurl path traversal with percent-encoded slashes (CVSS 4.6)
- [CVE-2025-15224](https://cve.now/CVE-2025-15224.md): libssh key passphrase bypass without agent set (CVSS 3.1)
- [CVE-2025-15079](https://cve.now/CVE-2025-15079.md): libssh global known\_hosts override (CVSS 5.3)
- [CVE-2025-14819](https://cve.now/CVE-2025-14819.md): OpenSSL partial chain store policy bypass (CVSS 5.3)
- [CVE-2025-14524](https://cve.now/CVE-2025-14524.md): bearer token leak on cross-protocol redirect (CVSS 5.3)
- [CVE-2025-14017](https://cve.now/CVE-2025-14017.md): broken TLS options for threaded LDAPS (CVSS 6.3)
- [CVE-2025-13034](https://cve.now/CVE-2025-13034.md): No QUIC certificate pinning with GnuTLS (CVSS 5.9)
- [CVE-2025-10966](https://cve.now/CVE-2025-10966.md): missing SFTP host verification with wolfSSH (CVSS 4.3)
- [CVE-2025-10148](https://cve.now/CVE-2025-10148.md): predictable WebSocket mask (CVSS 5.3)
- [CVE-2025-9086](https://cve.now/CVE-2025-9086.md): Out of bounds read for cookie path (CVSS 7.5)
- [CVE-2025-5399](https://cve.now/CVE-2025-5399.md): WebSocket endless loop (CVSS 7.5)
- [CVE-2025-5025](https://cve.now/CVE-2025-5025.md): No QUIC certificate pinning with wolfSSL (CVSS 4.8)
- [CVE-2025-4947](https://cve.now/CVE-2025-4947.md): QUIC certificate check skip with wolfSSL (CVSS 6.5)
- [CVE-2025-0725](https://cve.now/CVE-2025-0725.md): gzip integer overflow (CVSS 7.3)
- [CVE-2025-0665](https://cve.now/CVE-2025-0665.md): eventfd double close (CVSS 7.0)
- [CVE-2025-0167](https://cve.now/CVE-2025-0167.md): netrc and default credential leak (CVSS 3.4)
- [CVE-2024-11053](https://cve.now/CVE-2024-11053.md): netrc and redirect credential leak (CVSS 3.4)
- [CVE-2024-9681](https://cve.now/CVE-2024-9681.md): HSTS subdomain overwrites parent cache entry (CVSS 5.9)
- [CVE-2024-8096](https://cve.now/CVE-2024-8096.md): OCSP stapling bypass with GnuTLS (CVSS 6.5)
- [CVE-2024-7264](https://cve.now/CVE-2024-7264.md): ASN.1 date parser overread (CVSS 6.3)
- [CVE-2024-6874](https://cve.now/CVE-2024-6874.md): macidn punycode buffer overread (CVSS 3.1)
- [CVE-2024-6197](https://cve.now/CVE-2024-6197.md): freeing stack buffer in utf8asn1str (CVSS 7.5)
- [CVE-2024-2466](https://cve.now/CVE-2024-2466.md): TLS certificate check bypass with mbedTLS (CVSS 6.5)
- [CVE-2024-2379](https://cve.now/CVE-2024-2379.md): QUIC certificate check bypass with wolfSSL (CVSS 6.3)
- [CVE-2024-2398](https://cve.now/CVE-2024-2398.md): HTTP/2 push headers memory-leak (CVSS 8.6)
- [CVE-2024-2004](https://cve.now/CVE-2024-2004.md): Usage of disabled protocol (CVSS 3.5)
- [CVE-2024-0853](https://cve.now/CVE-2024-0853.md): OCSP verification bypass with TLS session reuse (CVSS 5.3)
- [CVE-2023-46219](https://cve.now/CVE-2023-46219.md): When saving HSTS data to an excessively long file name, curl could end up removing all contents, making subsequent requests using that file (CVSS 5.3)
- [CVE-2023-46218](https://cve.now/CVE-2023-46218.md): This flaw allows a malicious HTTP server to set "super cookies" in curl that are then passed back to more origins than what is otherwise all (CVSS 6.5)
- [CVE-2023-38545](https://cve.now/CVE-2023-38545.md): This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. (CVSS 8.8)
- [CVE-2023-38546](https://cve.now/CVE-2023-38546.md): This flaw allows an attacker to insert cookies at will into a running program using libcurl, if the specific series of conditions are met. (no CVSS)
- [CVE-2023-38039](https://cve.now/CVE-2023-38039.md): When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. (CVSS 7.5)
- [CVE-2019-5436](https://cve.now/CVE-2019-5436.md): A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1. (CVSS 7.8)
- [CVE-2019-5435](https://cve.now/CVE-2019-5435.md): An integer overflow in curl's URL API results in a buffer overflow in libcurl 7.62.0 to and including 7.64.1. (no CVSS)
- [CVE-2017-2629](https://cve.now/CVE-2017-2629.md): curl before 7.53.0 has an incorrect TLS Certificate Status Request extension feature that asks for a fresh proof of the server's certificate (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/curl
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.