Vulnerabilities

CVSS

7.5 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Risk score

60.0

Published

2026-07-03

Status

Published

By default, curl automatically responds to WebSocket PING frames. Because curl lacks an upper bound on memory allocation for unacknowledged frames, a malicious server can exhaust all available memory by flooding curl with rapid, sequential PING messages.

Weaknesses

CWE-770 Allocation of Resources Without Limits or Throttling

Coverage 1

vulnerability

Multiples vulnérabilités dans Tenable Security Center (14 août 2026)

Multiple vulnerabilities have been discovered in Tenable Security Center, including remote code execution, privilege escalation, and SQL injection. These vulnerabilities affect versions of Security Center prior to 6.9.0.…

CERT-FR · Aug 14, 2026 High

CVE-2026-11564CVE-2026-11586CVE-2026-11856vulnerabilityremote code executionsql injection

All articles mentioning it

Advisories and references

• curl.se/docs/CVE-2026-11586.json
• curl.se/docs/CVE-2026-11586.html
• hackerone.com/reports/3788931