CVE-2026-111480: pause UAF from within callback #4102061 Valid Memory Corruption Low 2026-10-26 – 1 FTP authentication options leak to a cross-origin FTP redirect with unrestricted auth disabled #4105790 N/A Authentication Low 2026-10-26 – 1 CVE-2026-111482: libssh2 knownhosts prefix match #4112709 Valid Input Validation and Logic Low 2026-10-26 – 1 CVE-2026-111481: server-set cookie still aborts cookie jar #4112912 Valid Input Validation and Logic Low 2026-10-26 – 1 CVE-2026-111950: TLS session cache diff scheme reuse #4122175 Valid Input Validation and Logic Low 2026-10-26 – 1 CVE-2026-111952: OpenSSL provider use-after-free again #4122239 Valid Memory Corruption Medium 2026-10-26 – 1 CVE-2026-111954: upload reader failed redirect UAF #4123190 Valid Memory Corruption Low 2026-10-26 – 1 Cross-protocol redirect to imap:// or smtp:// uploads the -F/MIMEPOST form and the custom Authorization/Cookie headers to the redirect target #4123474 N/A Information Disclosure Low 2026-10-26 – 1 wolfSSL Backend Silently Ignores --cert-status (OCSP Stapling Bypass) #4127399 N/A Cryptography Medium 2026-10-20 – 1 CVE-2026-115529: Schannel TLS auto client session resumption #4136767 Valid Authentication Low 2026-10-26 – 1 Incomplete IDN hostname check on the transfer path can lead to credential disclosure to an unintended host #4147581 Informative No weakness recorded Low 2026-10-27 – 1 Integer overlow in "header_append" function #627245 Informative Memory Corruption – 2021-02-08 – 2 Libcurl ocasionally sends HTTPS traffic to port 443 rather than specified port 8080 #637800 Informative Information Disclosure Medium 2021-02-03 – 2 curl on Windows can be forced to execute code via OpenSSL environment variables #714215 Informative Access Control High 2021-02-08 – 2 Heap Buffer Overflow (READ of size 1) in ourWriteOut #765664 Informative Memory Corruption Low 2021-01-08 – 2 Proxy-Authorization header carried to a new host on a redirect #1086259 N/A Cryptography Medium 2021-03-08 – 2 Binary output bypass #1468962 N/A Memory Corruption Low 2022-03-09 – 2 CURLOPT_SSH_HOST_PUBLIC_KEY_SHA256 comparison disaster #1549435 N/A Cryptography Medium 2022-04-25 – 2 Cookie injection from non-secure context #1560324 N/A Authentication High 2022-05-13 – 2 Certificate authentication re-use on redirect #1563061 N/A Input Validation and Logic Medium 2022-05-11 – 2 Heap overflow via HTTP/2 PUSH_PROMISE #1589847 N/A Memory Corruption Low 2022-06-05 – 2 CVE-2022-42916: HSTS bypass via IDN #1730660 Valid Cryptography Medium 2022-10-27 – 2 CVE-2023-28321: IDN wildcard match #1950627 Valid Cryptography Low 2023-05-18 – 2 CVE-2026-8286: wrong STARTTLS connection reuse #3718195 Valid No weakness recorded Low 2026-06-24 – 2 CVE-2026-8458: wrong reuse for different services #3721183 Valid Authentication Low 2026-06-24 – 2 CVE-2026-8926: password leak with netrc and user in URL #3735184 Valid Information Disclosure Low 2026-06-24 – 2 CVE-2026-8925: SASL double-free #3735193 Valid Memory Corruption Medium 2026-06-24 – 2 CVE-2026-9547: SSH improper host validation #3751712 Valid Cryptography – 2026-06-24 – 2 Proxy CONNECT response poisoning via authentication retry in cf-h1-proxy.c (libcurl) #3767963 Informative Input Validation and Logic Medium 2026-06-03 – 2 curl/libcurl 8.20.0 NOPROXY bypass via uppercase-hex IPv4 aliases leaks off-proxy Basic credentials to the configured proxy #3773293 Informative No weakness recorded Medium 2026-06-03 – 2 CVE-2026-11856: cross-origin Digest auth state leak #3793260 Valid Information Disclosure Medium 2026-06-24 – 2 libcurl upload read callbacks miss recursive API guard, allowing prohibited multi API reentry and ASAN-confirmed UAF #3832393 N/A No weakness recorded Low 2026-06-30 – 2 CVE-2026-87866: wolfSSL public-key pinning bypass #3989514 Valid Cryptography Medium 2026-10-14 – 2 CVE-2026-86415: auto client cert connection reuse mixup #3993870 Valid No weakness recorded Low 2026-10-14 – 2 CVE-2026-92391: curl_mime_free stack overflow by recursion #4024222 Valid No weakness recorded None 2026-10-14 – 2 CVE-2026-111878: OpenSSL provider UAF on TLS shutdown #4116527 Valid Memory Corruption Low 2026-10-26 – 2 CVE-2026-111953: GnuTLS SecTrust OCSP staple bypass #4122300 Valid Cryptography Low 2026-10-26 – 2 GnuTLS + Apple SecTrust discards authenticated OCSP failure #4124276 N/A Cryptography Medium 2026-10-26 – 2 WebSocket send queue use-after-free during nested curl_ws_send() #4124722 Informative Memory Corruption Low 2026-10-20 – 2 Symlink-following truncation of arbitrary files in `Curl_fopen()` when saving cookie jars, HSTS, or alt-svc caches #4125257 N/A File and Path Handling Low 2026-10-20 – 2 OpenSSL `--cert-status` accepts indefinitely stale GOOD OCSP staples #4125601 N/A Cryptography Medium 2026-10-26 – 2 Derived cookie Path aborts cookie jar loading in curl 8.23.0 #4127231 N/A Input Validation and Logic Low 2026-10-26 – 2 server filename with control characters printed to terminal (`-J`) #4130124 N/A Injection and Smuggling Low 2026-10-26 – 2 Integer overflow in the source code tool_cb_prg.c #600359 Informative Memory Corruption – 2021-02-08 – 3 Poll loop/hang on incomplete HTTP header #889160 Informative Denial of Service Medium 2021-01-22 – 3 curl overwrites local file with -J option if file non-readable, but file writable. #926638 Informative Access Control Medium 2020-08-01 – 3 CVE-2020-8285: FTP wildcard stack overflow #1045844 Valid Denial of Service Medium 2021-01-08 – 3 Abusing URL Parsers by long schema name #1049624 Informative Server-Side Request Forgery None 2021-01-08 – 3 CVE-2021-22925: TELNET stack contents disclosure again #1223882 Valid Information Disclosure Low 2021-07-21 – 3 Denial of Service vulnerability in curl when parsing MQTT server response #1521610 Informative Denial of Service Medium 2022-03-28 – 3