Name: Vietnam CyStack Joint Stock Company
Address: Tan Hong Ha Complex, 317 Truong Chinh Street, Hanoi, Vietnam, 100000, VN
Telephone: (+84) 247 109 9656
Price range: Negotiable

Products & ServicesProducts & Services
SolutionsSolutions
PricingPricing
CompanyCompany
ResourcesResources

VulnScan

CURL Security Vulnerabilities | CyStack CVE Database

Vulnerability	Exploitation status	Fix	Affected product	Published	Severity

`CVE-2026-82209`domain-scoped PSL domain cookie	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityHigh
`CVE-2026-82208`wolfSSL CA-cache hit overrides callback	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityHigh
`CVE-2026-80255`secure cookie attribute bypass with tab	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityHigh
`CVE-2026-80231`native CA store conn reuse	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityHigh
`CVE-2026-80230`OpenSSL pinning bypass	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityHigh
`CVE-2026-80229`OpenSSL provider use-after-free	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published09/06/2026	SeverityHigh
`CVE-2026-19931`Negotiate ambient user conn reuse	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityCritical
`CVE-2026-18924`HTTP/2 server push UAF	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityCritical
`CVE-2026-13608`OpenLDAP SASL authentication bypass	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/06/2026	SeverityHigh
`CVE-2026-9547`SSH improper host validation	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-9546`sending old referer	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-9545`exposing HTTP/3 early data	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-9080`UAF after pause in socket callback	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-9079`stale proxy password leak	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-8932`incomplete mTLS config matching in conn reuse	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-8927`env-set cross-proxy Digest auth state leak	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-8926`password leak with netrc and user in URL	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-8925`SASL double-free	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-8924`trailing dot domain super cookie	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-8458`wrong reuse for different services	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityMedium
`CVE-2026-8286`wrong STARTTLS connection reuse	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-12064`proto-default skips SSH verification	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-11856`cross-origin Digest auth state leak	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-11586`WS Auto-PONG memory exhaustion	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-11564`Native CA trust persist	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-11352`QUIC zero-length UDP datagrams busy-loop	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityHigh
`CVE-2026-10536`HTTP/2 stream-dependency tree UAF	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/03/2026	SeverityCritical
`CVE-2026-7168`cross-proxy Digest auth state leak	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published05/13/2026	SeverityMedium
`CVE-2026-7009`OCSP stapling bypass with Apple SecTrust	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published05/13/2026	SeverityMedium
`CVE-2026-6429`netrc credential leak with reused proxy connection	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published05/13/2026	SeverityMedium
`CVE-2026-6276`stale custom cookie host causes cookie leak	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published05/13/2026	SeverityHigh
`CVE-2026-6253`proxy credentials leak over redirect-to proxy	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published05/13/2026	SeverityMedium
`CVE-2026-5773`wrong reuse of SMB connection	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published05/13/2026	SeverityHigh
`CVE-2026-5545`wrong reuse of HTTP Negotiate connection	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published05/13/2026	SeverityMedium
`CVE-2026-4873`connection reuse ignores TLS requirement	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published05/13/2026	SeverityMedium
`CVE-2026-3805`use after free in SMB connection reuse	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published03/11/2026	SeverityHigh
`CVE-2026-3784`wrong proxy connection reuse with credentials	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published03/11/2026	SeverityMedium
`CVE-2026-3783`token leak with redirect and netrc	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published03/11/2026	SeverityMedium
`CVE-2026-1965`bad reuse of HTTP Negotiate connection	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published03/11/2026	SeverityMedium
`CVE-2025-11563`wcurl path traversal with percent-encoded slashes	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published02/25/2026	SeverityMedium
`CVE-2025-15224`libssh key passphrase bypass without agent set	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published01/08/2026	SeverityLow
`CVE-2025-15079`libssh global known_hosts override	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published01/08/2026	SeverityMedium
`CVE-2025-14819`OpenSSL partial chain store policy bypass	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published01/08/2026	SeverityMedium
`CVE-2025-14524`bearer token leak on cross-protocol redirect	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published01/08/2026	SeverityMedium
`CVE-2025-14017`broken TLS options for threaded LDAPS	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published01/08/2026	SeverityMedium
`CVE-2025-13034`No QUIC certificate pinning with GnuTLS	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published01/08/2026	SeverityMedium
`CVE-2025-10966`missing SFTP host verification with wolfSSH	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published11/07/2025	SeverityMedium
`CVE-2025-10148`predictable WebSocket mask	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published09/12/2025	SeverityMedium
`CVE-2025-9086`Out of bounds read for cookie path	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published09/12/2025	SeverityHigh
`CVE-2025-5399`WebSocket endless loop	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published06/07/2025	SeverityHigh
`CVE-2025-5025`No QUIC certificate pinning with wolfSSL	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published05/28/2025	SeverityMedium
`CVE-2025-4947`QUIC certificate check skip with wolfSSL	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published05/28/2025	SeverityMedium
`CVE-2025-0725`gzip integer overflow	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published02/05/2025	SeverityHigh
`CVE-2025-0665`eventfd double close	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published02/05/2025	SeverityHigh
`CVE-2025-0167`netrc and default credential leak	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published02/05/2025	SeverityLow
`CVE-2024-11053`netrc and redirect credential leak	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published12/11/2024	SeverityLow
`CVE-2024-9681`HSTS subdomain overwrites parent cache entry	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published11/06/2024	SeverityMedium
`CVE-2024-8096`OCSP stapling bypass with GnuTLS	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published09/11/2024	SeverityMedium
`CVE-2024-7264`ASN.1 date parser overread	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published07/31/2024	SeverityMedium
`CVE-2024-6874`macidn punycode buffer overread	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published07/24/2024	SeverityLow
`CVE-2024-6197`freeing stack buffer in utf8asn1str	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published07/24/2024	SeverityHigh
`CVE-2024-2466`TLS certificate check bypass with mbedTLS	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published03/27/2024	SeverityMedium
`CVE-2024-2379`QUIC certificate check bypass with wolfSSL	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published03/27/2024	SeverityMedium
`CVE-2024-2398`HTTP/2 push headers memory-leak	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published03/27/2024	SeverityHigh
`CVE-2024-2004`Usage of disabled protocol	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published03/27/2024	SeverityLow
`CVE-2024-0853`OCSP verification bypass with TLS session reuse	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published02/03/2024	SeverityMedium
`CVE-2023-46219`	Exploitation statusPublic exploit	FixNot confirmed	Affected productcurl	Published12/12/2023	SeverityMedium
`CVE-2023-46218`	Exploitation statusPublic exploit	FixNot confirmed	Affected productcurl	Published12/07/2023	SeverityMedium
`CVE-2023-38545`	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published10/18/2023	SeverityHigh
`CVE-2023-38546`	Exploitation statusNot known exploited	FixYes	Affected productcurl	Published10/18/2023	SeverityUnknown
`CVE-2023-38039`	Exploitation statusPublic exploit	FixYes	Affected productcurl	Published09/15/2023	SeverityHigh
`CVE-2019-5436`	Exploitation statusNot known exploited	FixNot confirmed	Affected productcurl	Published05/28/2019	SeverityHigh
`CVE-2019-5435`	Exploitation statusNot confirmed	FixNot confirmed	Affected productcurl	Published05/28/2019	SeverityUnknown
`CVE-2017-2629`	Exploitation statusNot confirmed	FixNot confirmed	Affected productcurl	Published07/27/2018	SeverityMedium
`CVE-2012-0036`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published04/13/2012	SeverityUnknown
`CVE-2010-3842`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/27/2010	SeverityUnknown
`CVE-2010-0734`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/19/2010	SeverityUnknown
`CVE-2009-2417`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published08/14/2009	SeverityUnknown
`CVE-2009-0037`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published03/05/2009	SeverityUnknown
`CVE-2005-3185`	Exploitation statusNot confirmed	FixNot confirmed	Affected productNot confirmed	Published10/13/2005	SeverityUnknown

80 / 80 Results

All vulnerabilities loaded

Security vulnerabilities from CURL

CURL

How many security vulnerabilities does CURL have?

Which CURL product has the most security vulnerabilities?

Filters

Run an in-depth assessment with complete web risk management

Popular CURL products

curl