Vulnerabilities

CVSS

9.1 Critical

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Risk score

72.8

Published

2026-07-03

Status

Published

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA material for a later transfer.

Weaknesses

CWE-295 Improper Certificate Validation

Coverage 1

vulnerability

Multiples vulnérabilités dans Tenable Security Center (14 août 2026)

Multiple vulnerabilities have been discovered in Tenable Security Center, including remote code execution, privilege escalation, and SQL injection. These vulnerabilities affect versions of Security Center prior to 6.9.0.…

CERT-FR · Aug 14, 2026 High

CVE-2026-11564CVE-2026-11586CVE-2026-11856vulnerabilityremote code executionsql injection

All articles mentioning it

Advisories and references

• curl.se/docs/CVE-2026-11564.json
• curl.se/docs/CVE-2026-11564.html
• hackerone.com/reports/3788984