Vulnerabilities in CURL
98 resultsCVE-2026-5545MEDIUMwrong reuse of HTTP Negotiate connectionEPSS 0.4%CVE-2026-12064HIGHproto-default skips SSH verificationEPSS 0.4%CVE-2026-9545HIGHexposing HTTP/3 early dataEPSS 0.4%CVE-2026-82208HIGHwolfSSL CA-cache hit overrides callbackEPSS 0.4%CVE-2026-8932HIGHincomplete mTLS config matching in conn reuseEPSS 0.4%CVE-2026-82209HIGHdomain-scoped PSL domain cookieEPSS 0.4%CVE-2026-8458MEDIUMwrong reuse for different servicesEPSS 0.4%CVE-2026-80230HIGHOpenSSL pinning bypassEPSS 0.4%CVE-2026-9547HIGHSSH improper host validationEPSS 0.4%CVE-2026-4873MEDIUMconnection reuse ignores TLS requirementEPSS 0.3%CVE-2026-8286HIGHwrong STARTTLS connection reuseEPSS 0.3%CVE-2025-5025MEDIUMNo QUIC certificate pinning with wolfSSLEPSS 0.3%CVE-2025-4947MEDIUMQUIC certificate check skip with wolfSSLEPSS 0.3%CVE-2026-1965MEDIUMbad reuse of HTTP Negotiate connectionEPSS 0.3%CVE-2026-6276HIGHstale custom cookie host causes cookie leakEPSS 0.3%CVE-2026-7009MEDIUMOCSP stapling bypass with Apple SecTrustEPSS 0.3%CVE-2025-13034MEDIUMNo QUIC certificate pinning with GnuTLSEPSS 0.2%CVE-2025-14017MEDIUMbroken TLS options for threaded LDAPSEPSS 0.1%