CVE-2026-80231

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting (`CURLSSLOPT_NATIVE_CA`) than when the connection was created.

Scoring

Severity

HIGH

CVSS base score

7.5

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS probability

0.94%

CWE

CWE-488

Published

2026-09-06

Last modified

2026-09-16

Affected products

• curl curl
• curl curl
• curl curl
• curl curl
• curl curl
• curl curl
• curl curl
• curl curl

Weakness type

• CWE-488

Related vulnerabilities

• CVE-2025-47928 — Spotipy repo vulnerable to secrets exfiltration via `pull_request_target`
• CVE-2026-16498 — terraform-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
• CVE-2026-16326 — consul-mcp-server vulnerable to cross-tenant credential reuse in streamable-HTTP stateless mode
• CVE-2026-19931 — Negotiate ambient user conn reuse
• CVE-2024-38367 — CoacoaPods trunk sessions verification step could be manipulated for owner session hijacking
• CVE-2023-1907 — Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session
• CVE-2024-6162 — Undertow: url-encoded request path information can be broken on ajp-listener
• CVE-2024-5148 — Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate

Markdown version · Browse all CVEs