CVE-2026-19931 (GCVE-0-2026-19931)
Vulnerability from cvelistv5
Published
2026-09-06 17:47
Modified
2026-09-15 06:02
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- CWE-488 - Exposure of Data Element to Wrong Session
Summary
A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given
hostname using Negotiate authentication, when the initial request is done
using empty credentials. This can make user B's request get sent over user A's
previously authenticated connection.
References
Impacted products
| Vendor | Product | Version | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| curl | curl |
Version: 7.64.1 ≤ Version: 8.15.0 ≤ Version: 8.17.0 ≤ Version: 8.21.0 ≤ |
||||||||||||
|
||||||||||||||
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-19931",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-08T15:42:15.881334Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-488",
"description": "CWE-488 Exposure of Data Element to Wrong Session",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-08T15:42:43.125Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://hackerone.com/reports/3923520"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "curl",
"vendor": "curl",
"versions": [
{
"lessThan": "8.14.2",
"status": "affected",
"version": "7.64.1",
"versionType": "semver"
},
{
"lessThan": "8.16.1",
"status": "affected",
"version": "8.15.0",
"versionType": "semver"
},
{
"lessThan": "8.20.1",
"status": "affected",
"version": "8.17.0",
"versionType": "semver"
},
{
"lessThan": "8.22.0",
"status": "affected",
"version": "8.21.0",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "curl",
"repo": "https://github.com/curl/curl.git",
"vendor": "curl",
"versions": [
{
"lessThan": "7103a93b05bc69ea98ed9d05d02fa9eeba533f2f",
"status": "affected",
"version": "6c6035532383e300c712e4c1cd9fdd749ed5cf59",
"versionType": "git"
}
]
},
{
"defaultStatus": "unaffected",
"product": "curl",
"vendor": "curl",
"versions": [
{
"status": "affected",
"version": "8.21.0"
},
{
"status": "affected",
"version": "8.20.0"
},
{
"status": "affected",
"version": "8.19.0"
},
{
"status": "affected",
"version": "8.18.0"
},
{
"status": "affected",
"version": "8.17.0"
},
{
"status": "affected",
"version": "8.16.0"
},
{
"status": "affected",
"version": "8.15.0"
},
{
"status": "affected",
"version": "8.14.1"
},
{
"status": "affected",
"version": "8.14.0"
},
{
"status": "affected",
"version": "8.13.0"
},
{
"status": "affected",
"version": "8.12.1"
},
{
"status": "affected",
"version": "8.12.0"
},
{
"status": "affected",
"version": "8.11.1"
},
{
"status": "affected",
"version": "8.11.0"
},
{
"status": "affected",
"version": "8.10.1"
},
{
"status": "affected",
"version": "8.10.0"
},
{
"status": "affected",
"version": "8.9.1"
},
{
"status": "affected",
"version": "8.9.0"
},
{
"status": "affected",
"version": "8.8.0"
},
{
"status": "affected",
"version": "8.7.1"
},
{
"status": "affected",
"version": "8.7.0"
},
{
"status": "affected",
"version": "8.6.0"
},
{
"status": "affected",
"version": "8.5.0"
},
{
"status": "affected",
"version": "8.4.0"
},
{
"status": "affected",
"version": "8.3.0"
},
{
"status": "affected",
"version": "8.2.1"
},
{
"status": "affected",
"version": "8.2.0"
},
{
"status": "affected",
"version": "8.1.2"
},
{
"status": "affected",
"version": "8.1.1"
},
{
"status": "affected",
"version": "8.1.0"
},
{
"status": "affected",
"version": "8.0.1"
},
{
"status": "affected",
"version": "8.0.0"
},
{
"status": "affected",
"version": "7.88.1"
},
{
"status": "affected",
"version": "7.88.0"
},
{
"status": "affected",
"version": "7.87.0"
},
{
"status": "affected",
"version": "7.86.0"
},
{
"status": "affected",
"version": "7.85.0"
},
{
"status": "affected",
"version": "7.84.0"
},
{
"status": "affected",
"version": "7.83.1"
},
{
"status": "affected",
"version": "7.83.0"
},
{
"status": "affected",
"version": "7.82.0"
},
{
"status": "affected",
"version": "7.81.0"
},
{
"status": "affected",
"version": "7.80.0"
},
{
"status": "affected",
"version": "7.79.1"
},
{
"status": "affected",
"version": "7.79.0"
},
{
"status": "affected",
"version": "7.78.0"
},
{
"status": "affected",
"version": "7.77.0"
},
{
"status": "affected",
"version": "7.76.1"
},
{
"status": "affected",
"version": "7.76.0"
},
{
"status": "affected",
"version": "7.75.0"
},
{
"status": "affected",
"version": "7.74.0"
},
{
"status": "affected",
"version": "7.73.0"
},
{
"status": "affected",
"version": "7.72.0"
},
{
"status": "affected",
"version": "7.71.1"
},
{
"status": "affected",
"version": "7.71.0"
},
{
"status": "affected",
"version": "7.70.0"
},
{
"status": "affected",
"version": "7.69.1"
},
{
"status": "affected",
"version": "7.69.0"
},
{
"status": "affected",
"version": "7.68.0"
},
{
"status": "affected",
"version": "7.67.0"
},
{
"status": "affected",
"version": "7.66.0"
},
{
"status": "affected",
"version": "7.65.3"
},
{
"status": "affected",
"version": "7.65.2"
},
{
"status": "affected",
"version": "7.65.1"
},
{
"status": "affected",
"version": "7.65.0"
},
{
"status": "affected",
"version": "7.64.1"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Martin Dukek"
},
{
"lang": "en",
"type": "remediation developer",
"value": "Stefan Eissing"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B\u0027s request get sent over user A\u0027s\npreviously authenticated connection."
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-488",
"description": "Exposure of Data Element to Wrong Session",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T06:02:51.009Z",
"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
"shortName": "curl"
},
"references": [
{
"url": "https://curl.se/docs/CVE-2026-19931.json"
},
{
"url": "https://curl.se/docs/CVE-2026-19931.html"
},
{
"url": "https://hackerone.com/reports/3923520"
}
],
"title": "Negotiate ambient user conn reuse",
"x_generator": {
"engine": "cvelib 1.8.0"
},
"x_osv": {
"affected": [
{
"ranges": [
{
"events": [
{
"introduced": "7.64.1"
},
{
"fixed": "8.14.2"
},
{
"introduced": "8.15.0"
},
{
"fixed": "8.16.1"
},
{
"introduced": "8.17.0"
},
{
"fixed": "8.20.1"
},
{
"introduced": "8.21.0"
},
{
"fixed": "8.22.0"
}
],
"type": "SEMVER"
},
{
"events": [
{
"introduced": "6c6035532383e300c712e4c1cd9fdd749ed5cf59"
},
{
"fixed": "7103a93b05bc69ea98ed9d05d02fa9eeba533f2f"
}
],
"repo": "https://github.com/curl/curl.git",
"type": "GIT"
}
],
"versions": [
"8.21.0",
"8.20.0",
"8.19.0",
"8.18.0",
"8.17.0",
"8.16.0",
"8.15.0",
"8.14.1",
"8.14.0",
"8.13.0",
"8.12.1",
"8.12.0",
"8.11.1",
"8.11.0",
"8.10.1",
"8.10.0",
"8.9.1",
"8.9.0",
"8.8.0",
"8.7.1",
"8.7.0",
"8.6.0",
"8.5.0",
"8.4.0",
"8.3.0",
"8.2.1",
"8.2.0",
"8.1.2",
"8.1.1",
"8.1.0",
"8.0.1",
"8.0.0",
"7.88.1",
"7.88.0",
"7.87.0",
"7.86.0",
"7.85.0",
"7.84.0",
"7.83.1",
"7.83.0",
"7.82.0",
"7.81.0",
"7.80.0",
"7.79.1",
"7.79.0",
"7.78.0",
"7.77.0",
"7.76.1",
"7.76.0",
"7.75.0",
"7.74.0",
"7.73.0",
"7.72.0",
"7.71.1",
"7.71.0",
"7.70.0",
"7.69.1",
"7.69.0",
"7.68.0",
"7.67.0",
"7.66.0",
"7.65.3",
"7.65.2",
"7.65.1",
"7.65.0",
"7.64.1"
]
}
],
"aliases": [
"CVE-2026-19931"
],
"credits": [
{
"name": "Martin Dukek",
"type": "finder"
},
{
"name": "Stefan Eissing",
"type": "remediation developer"
}
],
"database_specific": {
"CWE": {
"desc": "Exposure of Data Element to Wrong Session",
"id": "CWE-488"
},
"URL": "https://curl.se/docs/CVE-2026-19931.json",
"affects": "both",
"issue": "https://hackerone.com/reports/3923520",
"last_affected": "8.21.0",
"package": "curl",
"severity": "Medium",
"www": "https://curl.se/docs/CVE-2026-19931.html"
},
"details": "A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\nhostname using Negotiate authentication, when the initial request is done\nusing empty credentials. This can make user B\u0027s request get sent over user A\u0027s\npreviously authenticated connection.",
"id": "CURL-CVE-2026-19931",
"modified": "2026-09-07T10:34:51.00Z",
"published": "2026-09-02T08:00:00.00Z",
"schema_version": "1.5.0",
"summary": "Negotiate ambient user conn reuse"
}
}
},
"cveMetadata": {
"assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
"assignerShortName": "curl",
"cveId": "CVE-2026-19931",
"datePublished": "2026-09-06T17:47:43.523Z",
"dateReserved": "2026-08-15T10:35:02.789Z",
"dateUpdated": "2026-09-15T06:02:51.009Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-19931\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-09-08T15:42:15.881334Z\"}}}], \"references\": [{\"url\": \"https://hackerone.com/reports/3923520\", \"tags\": [\"exploit\"]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-488\", \"description\": \"CWE-488 Exposure of Data Element to Wrong Session\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-09-08T15:42:38.212Z\"}}], \"cna\": {\"title\": \"Negotiate ambient user conn reuse\", \"x_osv\": {\"id\": \"CURL-CVE-2026-19931\", \"aliases\": [\"CVE-2026-19931\"], \"credits\": [{\"name\": \"Martin Dukek\", \"type\": \"finder\"}, {\"name\": \"Stefan Eissing\", \"type\": \"remediation developer\"}], \"details\": \"A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\\nhostname using Negotiate authentication, when the initial request is done\\nusing empty credentials. This can make user B\u0027s request get sent over user A\u0027s\\npreviously authenticated connection.\", \"summary\": \"Negotiate ambient user conn reuse\", \"affected\": [{\"ranges\": [{\"type\": \"SEMVER\", \"events\": [{\"introduced\": \"7.64.1\"}, {\"fixed\": \"8.14.2\"}, {\"introduced\": \"8.15.0\"}, {\"fixed\": \"8.16.1\"}, {\"introduced\": \"8.17.0\"}, {\"fixed\": \"8.20.1\"}, {\"introduced\": \"8.21.0\"}, {\"fixed\": \"8.22.0\"}]}, {\"repo\": \"https://github.com/curl/curl.git\", \"type\": \"GIT\", \"events\": [{\"introduced\": \"6c6035532383e300c712e4c1cd9fdd749ed5cf59\"}, {\"fixed\": \"7103a93b05bc69ea98ed9d05d02fa9eeba533f2f\"}]}], \"versions\": [\"8.21.0\", \"8.20.0\", \"8.19.0\", \"8.18.0\", \"8.17.0\", \"8.16.0\", \"8.15.0\", \"8.14.1\", \"8.14.0\", \"8.13.0\", \"8.12.1\", \"8.12.0\", \"8.11.1\", \"8.11.0\", \"8.10.1\", \"8.10.0\", \"8.9.1\", \"8.9.0\", \"8.8.0\", \"8.7.1\", \"8.7.0\", \"8.6.0\", \"8.5.0\", \"8.4.0\", \"8.3.0\", \"8.2.1\", \"8.2.0\", \"8.1.2\", \"8.1.1\", \"8.1.0\", \"8.0.1\", \"8.0.0\", \"7.88.1\", \"7.88.0\", \"7.87.0\", \"7.86.0\", \"7.85.0\", \"7.84.0\", \"7.83.1\", \"7.83.0\", \"7.82.0\", \"7.81.0\", \"7.80.0\", \"7.79.1\", \"7.79.0\", \"7.78.0\", \"7.77.0\", \"7.76.1\", \"7.76.0\", \"7.75.0\", \"7.74.0\", \"7.73.0\", \"7.72.0\", \"7.71.1\", \"7.71.0\", \"7.70.0\", \"7.69.1\", \"7.69.0\", \"7.68.0\", \"7.67.0\", \"7.66.0\", \"7.65.3\", \"7.65.2\", \"7.65.1\", \"7.65.0\", \"7.64.1\"]}], \"modified\": \"2026-09-07T10:34:51.00Z\", \"published\": \"2026-09-02T08:00:00.00Z\", \"schema_version\": \"1.5.0\", \"database_specific\": {\"CWE\": {\"id\": \"CWE-488\", \"desc\": \"Exposure of Data Element to Wrong Session\"}, \"URL\": \"https://curl.se/docs/CVE-2026-19931.json\", \"www\": \"https://curl.se/docs/CVE-2026-19931.html\", \"issue\": \"https://hackerone.com/reports/3923520\", \"affects\": \"both\", \"package\": \"curl\", \"severity\": \"Medium\", \"last_affected\": \"8.21.0\"}}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Martin Dukek\"}, {\"lang\": \"en\", \"type\": \"remediation developer\", \"value\": \"Stefan Eissing\"}], \"affected\": [{\"vendor\": \"curl\", \"product\": \"curl\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.64.1\", \"lessThan\": \"8.14.2\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"8.15.0\", \"lessThan\": \"8.16.1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"8.17.0\", \"lessThan\": \"8.20.1\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"8.21.0\", \"lessThan\": \"8.22.0\", \"versionType\": \"semver\"}], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://github.com/curl/curl.git\", \"vendor\": \"curl\", \"product\": \"curl\", \"versions\": [{\"status\": \"affected\", \"version\": \"6c6035532383e300c712e4c1cd9fdd749ed5cf59\", \"lessThan\": \"7103a93b05bc69ea98ed9d05d02fa9eeba533f2f\", \"versionType\": \"git\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"curl\", \"product\": \"curl\", \"versions\": [{\"status\": \"affected\", \"version\": \"8.21.0\"}, {\"status\": \"affected\", \"version\": \"8.20.0\"}, {\"status\": \"affected\", \"version\": \"8.19.0\"}, {\"status\": \"affected\", \"version\": \"8.18.0\"}, {\"status\": \"affected\", \"version\": \"8.17.0\"}, {\"status\": \"affected\", \"version\": \"8.16.0\"}, {\"status\": \"affected\", \"version\": \"8.15.0\"}, {\"status\": \"affected\", \"version\": \"8.14.1\"}, {\"status\": \"affected\", \"version\": \"8.14.0\"}, {\"status\": \"affected\", \"version\": \"8.13.0\"}, {\"status\": \"affected\", \"version\": \"8.12.1\"}, {\"status\": \"affected\", \"version\": \"8.12.0\"}, {\"status\": \"affected\", \"version\": \"8.11.1\"}, {\"status\": \"affected\", \"version\": \"8.11.0\"}, {\"status\": \"affected\", \"version\": \"8.10.1\"}, {\"status\": \"affected\", \"version\": \"8.10.0\"}, {\"status\": \"affected\", \"version\": \"8.9.1\"}, {\"status\": \"affected\", \"version\": \"8.9.0\"}, {\"status\": \"affected\", \"version\": \"8.8.0\"}, {\"status\": \"affected\", \"version\": \"8.7.1\"}, {\"status\": \"affected\", \"version\": \"8.7.0\"}, {\"status\": \"affected\", \"version\": \"8.6.0\"}, {\"status\": \"affected\", \"version\": \"8.5.0\"}, {\"status\": \"affected\", \"version\": \"8.4.0\"}, {\"status\": \"affected\", \"version\": \"8.3.0\"}, {\"status\": \"affected\", \"version\": \"8.2.1\"}, {\"status\": \"affected\", \"version\": \"8.2.0\"}, {\"status\": \"affected\", \"version\": \"8.1.2\"}, {\"status\": \"affected\", \"version\": \"8.1.1\"}, {\"status\": \"affected\", \"version\": \"8.1.0\"}, {\"status\": \"affected\", \"version\": \"8.0.1\"}, {\"status\": \"affected\", \"version\": \"8.0.0\"}, {\"status\": \"affected\", \"version\": \"7.88.1\"}, {\"status\": \"affected\", \"version\": \"7.88.0\"}, {\"status\": \"affected\", \"version\": \"7.87.0\"}, {\"status\": \"affected\", \"version\": \"7.86.0\"}, {\"status\": \"affected\", \"version\": \"7.85.0\"}, {\"status\": \"affected\", \"version\": \"7.84.0\"}, {\"status\": \"affected\", \"version\": \"7.83.1\"}, {\"status\": \"affected\", \"version\": \"7.83.0\"}, {\"status\": \"affected\", \"version\": \"7.82.0\"}, {\"status\": \"affected\", \"version\": \"7.81.0\"}, {\"status\": \"affected\", \"version\": \"7.80.0\"}, {\"status\": \"affected\", \"version\": \"7.79.1\"}, {\"status\": \"affected\", \"version\": \"7.79.0\"}, {\"status\": \"affected\", \"version\": \"7.78.0\"}, {\"status\": \"affected\", \"version\": \"7.77.0\"}, {\"status\": \"affected\", \"version\": \"7.76.1\"}, {\"status\": \"affected\", \"version\": \"7.76.0\"}, {\"status\": \"affected\", \"version\": \"7.75.0\"}, {\"status\": \"affected\", \"version\": \"7.74.0\"}, {\"status\": \"affected\", \"version\": \"7.73.0\"}, {\"status\": \"affected\", \"version\": \"7.72.0\"}, {\"status\": \"affected\", \"version\": \"7.71.1\"}, {\"status\": \"affected\", \"version\": \"7.71.0\"}, {\"status\": \"affected\", \"version\": \"7.70.0\"}, {\"status\": \"affected\", \"version\": \"7.69.1\"}, {\"status\": \"affected\", \"version\": \"7.69.0\"}, {\"status\": \"affected\", \"version\": \"7.68.0\"}, {\"status\": \"affected\", \"version\": \"7.67.0\"}, {\"status\": \"affected\", \"version\": \"7.66.0\"}, {\"status\": \"affected\", \"version\": \"7.65.3\"}, {\"status\": \"affected\", \"version\": \"7.65.2\"}, {\"status\": \"affected\", \"version\": \"7.65.1\"}, {\"status\": \"affected\", \"version\": \"7.65.0\"}, {\"status\": \"affected\", \"version\": \"7.64.1\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://curl.se/docs/CVE-2026-19931.json\"}, {\"url\": \"https://curl.se/docs/CVE-2026-19931.html\"}, {\"url\": \"https://hackerone.com/reports/3923520\"}], \"x_generator\": {\"engine\": \"cvelib 1.8.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given\\nhostname using Negotiate authentication, when the initial request is done\\nusing empty credentials. This can make user B\u0027s request get sent over user A\u0027s\\npreviously authenticated connection.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-488\", \"description\": \"Exposure of Data Element to Wrong Session\"}]}], \"providerMetadata\": {\"orgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"shortName\": \"curl\", \"dateUpdated\": \"2026-09-15T06:02:51.009Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-19931\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-15T06:02:51.009Z\", \"dateReserved\": \"2026-08-15T10:35:02.789Z\", \"assignerOrgId\": \"2499f714-1537-4658-8207-48ae4bb9eae9\", \"datePublished\": \"2026-09-06T17:47:43.523Z\", \"assignerShortName\": \"curl\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…