Every CVE Search/ Get API key

CVE-2026-9080

UAF after pause in socket callback

7.3 HighFix available

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

0.49%Up 0.3 points since Jul 4, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.3

UAF after pause in socket callback

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
CVE-2026-9080
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-416
Updated
2026-11-02
EUVDEUVD-2026-41511 7.3

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
EUVD-2026-41511
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-hf34-v47h-w6m3 7.3

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a...

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
GHSA-hf34-v47h-w6m3
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-416
Updated
2026-11-02
NVD 7.3

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
CVE-2026-9080
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-416
Updated
2026-11-02
OSVALPINE-CVE-2026-9080 7.3

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
ALPINE-CVE-2026-9080
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVBELL-CVE-2026-9080 7.3
Record
BELL-CVE-2026-9080
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
Show 22 moreShow less
OSV 7.3

UAF after pause in socket callback

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
CVE-2026-9080
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness
CWE-416
Updated
2026-11-02
OSVDEBIAN-CVE-2026-9080 7.3

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
DEBIAN-CVE-2026-9080
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVJLSEC-2026-1219 7.3

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a...

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
JLSEC-2026-1219
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:29017 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:29017
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:34975 8.1

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:34975
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-9080 7.3

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
UBUNTU-CVE-2026-9080
CVSS 3.1
7.3 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVCURL-CVE-2026-9080 No score

UAF after pause in socket callback

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

Record
CURL-CVE-2026-9080
Updated
2026-11-02
OSVopenSUSE-SU-2026:11230-1 No score

curl-8.21.0-1.1 on GA media

These are all security issues fixed in the curl-8.21.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11230-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:21272-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
openSUSE-SU-2026:21272-1
Updated
2026-11-02
OSVROOT-OS-ALPINE-320-CVE-2026-9080 No score

CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Alpine:3.20. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-320-CVE-2026-9080
Updated
2026-11-02
OSVROOT-OS-ALPINE-321-CVE-2026-9080 No score

CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Alpine:3.21. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-321-CVE-2026-9080
Updated
2026-11-03
OSVROOT-OS-ALPINE-322-CVE-2026-9080 No score

CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Alpine:3.22. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-322-CVE-2026-9080
Updated
2026-11-02
OSVROOT-OS-ALPINE-323-CVE-2026-9080 No score

CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Alpine:3.23. Multiple fixed versions available.

Record
ROOT-OS-ALPINE-323-CVE-2026-9080
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2026-9080 No score

CVE-2026-9080 in curl - Patched by Root

Root has patched CVE-2026-9080 in the curl package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2026-9080
Updated
2026-11-03
OSVSUSE-SU-2026:22553-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
SUSE-SU-2026:22553-1
Updated
2026-11-02
OSVSUSE-SU-2026:22582-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
SUSE-SU-2026:22582-1
Updated
2026-11-02
OSVSUSE-SU-2026:22709-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
SUSE-SU-2026:22709-1
Updated
2026-11-02
OSVSUSE-SU-2026:22889-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
SUSE-SU-2026:22889-1
Updated
2026-11-02
OSVSUSE-SU-2026:2925-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-4873: connection reuse ignores TLS requirement (bsc#1262631).
  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
SUSE-SU-2026:2925-1
Updated
2026-11-02
OSVSUSE-SU-2026:2926-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
SUSE-SU-2026:2926-1
Updated
2026-11-02
OSVSUSE-SU-2026:3043-1 No score

Security update for curl

This update for curl fixes the following issues

  • CVE-2026-8286: wrong STARTTLS connection reuse (bsc#1268402).
  • CVE-2026-8458: wrong reuse for different services (bsc#1268407).
  • CVE-2026-8924: traling dot domain super cookie (bsc#1268409).
  • CVE-2026-8927: env-set cross-proxy Digest auth state leak (bsc#1268413).
  • CVE-2026-9079: stale proxy password leak (bsc#1268415).
  • CVE-2026-9080: UAF after pause in socket callback (bsc#1268416).
  • CVE-2026-9545: exposing HTTP/3 early data (bsc#1268417).
  • CVE-2026-9547: SSH improper host validation (bsc#1268420).
  • CVE-2026-10536: HTTP/2 stream-dependency tree UAF (bsc#1268422).
  • CVE-2026-12064: proto-default skips SSH verification (bsc#1268427).
Record
SUSE-SU-2026:3043-1
Updated
2026-11-02
OSVUSN-8820-1 No score

curl vulnerabilities

Eunsoo Kim discovered that curl incorrectly handled SASL negotiation for LDAP authentication in certain circumstances. A machine-in-the-middle attacker could possibly use this issue to bypass peer validation. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-13608)

Stephan Zeisberg discovered that curl incorrectly handled HTTP/2 Server Push streams when sharing connections between handles. A remote attacker could possibly use this issue to cause curl to crash, resulting in a denial of service, or execute arbitrary code. (CVE-2026-18924)

Stanislav Fort discovered that curl incorrectly managed the lifetime of pooled TLS connections when using the multi interface. An attacker could possibly use this issue to cause curl to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-80229)

Stanislav Fort discovered that curl did not properly enforce public key pinning when certificate verification was disabled in certain circumstances. A remote attacker could possibly use this issue to bypass pinning checks and cause curl to accept connections that should have been rejected. (CVE-2026-80230)

Stanislav Fort discovered that curl incorrectly handled the Secure attribute of cookies in certain circumstances. A remote attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-80255)

Stanislav Fort discovered that curl did not properly enforce Public Suffix List boundaries when handling cookies in certain circumstances. A remote attacker could possibly use this issue to cause cookies to be sent to unrelated domains, resulting in sensitive information being exposed. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS. (CVE-2026-82209)

Ady Elouej discovered that curl did not clear proxy authentication state between requests when reusing a handle with environment-variable proxy configuration. A remote attacker could possibly use this issue to obtain sensitive credentials. This issue was previously fixed in USN-8487-1, but that fix was incomplete for Ubuntu 16.04 LTS. (CVE-2026-8927)

Record
USN-8820-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
curl
Alpine:v3.23
 8.13.0 up to 8.22.0-r0
8.22.0-r0
curl
Alpine:v3.24
 8.13.0 up to 8.21.0-r0
8.21.0-r0
curl
Alpaquita:23
 8.1.0-r2 up to 8.21.0-r0
8.21.0-r0
curl
Alpaquita:25
 8.14.0-r1 up to 8.21.0-r0
8.21.0-r0
curl
Alpaquita:stream
 8.1.2-r0 up to 8.21.0-r0
8.21.0-r0
curl
BellSoft Hardened Containers:stream
 8.1.2-r0 up to 8.21.0-r0
8.21.0-r0
curl
Debian:13
 All versions, plus listed versions
8.14.1-28.14.1-2+deb13u18.14.1-2+deb13u28.14.1-2+deb13u2~bpo13+18.14.1-2+deb13u3
Show 45 moreShow less
8.14.1-2+deb13u48.14.1-2+deb13u58.14.1-2+exp18.15.0-18.15.0-1~bpo13+18.15.0-1~exp18.15.0~rc1-1exp18.15.0~rc2-1~exp18.15.0~rc3-1~exp18.16.0-18.16.0-1+exp18.16.0-1~bpo13+18.16.0-28.16.0-38.16.0-48.16.0-4~bpo13+18.16.0~rc1-1~exp18.16.0~rc2-18.16.0~rc2-28.16.0~rc3-18.17.0-18.17.0-28.17.0-38.17.0~rc1-1~exp18.17.0~rc2-18.17.0~rc3-18.18.0-18.18.0-1~bpo13+18.18.0-28.18.0~rc1-1+exp18.18.0~rc2-18.18.0~rc3-18.19.0-18.19.0-1+exp18.19.0-1~bpo13+18.19.0-28.19.0-38.19.0-3+exp18.19.0-3+exp28.19.0~rc1-1~exp18.19.0~rc2-18.19.0~rc2-28.19.0~rc3-18.20.0-18.20.0-1+exp
 None known
curl
Debian:14
 before 8.21.0~rc2-1, plus listed versions
8.14.1-28.14.1-2+exp18.15.0-18.15.0-1~bpo13+18.15.0-1~exp1
Show 45 moreShow less
8.15.0~rc1-1exp18.15.0~rc2-1~exp18.15.0~rc3-1~exp18.16.0-18.16.0-1+exp18.16.0-1~bpo13+18.16.0-28.16.0-38.16.0-48.16.0-4~bpo13+18.16.0~rc1-1~exp18.16.0~rc2-18.16.0~rc2-28.16.0~rc3-18.17.0-18.17.0-28.17.0-38.17.0~rc1-1~exp18.17.0~rc2-18.17.0~rc3-18.18.0-18.18.0-1~bpo13+18.18.0-28.18.0~rc1-1+exp18.18.0~rc2-18.18.0~rc3-18.19.0-18.19.0-1+exp18.19.0-1~bpo13+18.19.0-28.19.0-38.19.0-3+exp18.19.0-3+exp28.19.0~rc1-1~exp18.19.0~rc2-18.19.0~rc2-28.19.0~rc3-18.20.0-18.20.0-1+exp8.20.0-28.20.0-2+exp18.20.0-2~bpo13+18.20.0-38.20.0-48.20.0-5
8.21.0~rc2-1
CURL_jll
Julia
 8.13.0+0 up to 8.21.0+0
8.21.0+0
LibCURL_jll
Julia
 8.13.0+0 up to 8.21.0+0
8.21.0+0
Show 63 moreShow less
Affected packages
PackageAffectedFixed
curl
Red Hat:hummingbird:1
From an advisory covering 16 CVEs
 before 0:8.21.0-0.1.hum1
0:8.21.0-0.1.hum1
libcurl
Red Hat:hummingbird:1
From an advisory covering 16 CVEs
 before 0:8.21.0-0.1.hum1
0:8.21.0-0.1.hum1
libcurl-devel
Red Hat:hummingbird:1
From an advisory covering 16 CVEs
 before 0:8.21.0-0.1.hum1
0:8.21.0-0.1.hum1
libcurl-minimal
Red Hat:hummingbird:1
From an advisory covering 16 CVEs
 before 0:8.21.0-0.1.hum1
0:8.21.0-0.1.hum1
cargo
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
clippy
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-analyzer
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-debugger-common
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-doc
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-gdb
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-lldb
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-src
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-aarch64-unknown-none-softfloat
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-aarch64-unknown-uefi
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-i686-pc-windows-gnu
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-wasm32-unknown-unknown
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-wasm32-wasip1
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-x86_64-pc-windows-gnu
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-x86_64-unknown-none
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rust-std-static-x86_64-unknown-uefi
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
rustfmt
Red Hat:hummingbird:1
From an advisory covering 24 CVEs
 before 0:1.96.1-1.hum1
0:1.96.1-1.hum1
curl
Root:Alpine:3.20
 before 8.14.1-r20075
8.14.1-r200758.14.1-r200768.14.1-r200778.14.1-r200788.14.1-r200798.14.1-r2007108.14.1-r2007118.14.1-r200712
rootio-curl
Root:Alpine:3.20
 before 8.14.1-r20075
8.14.1-r200758.14.1-r200768.14.1-r200778.14.1-r200788.14.1-r200798.14.1-r2007108.14.1-r2007118.14.1-r200712
curl
Root:Alpine:3.21
 before 8.14.1-r20072
8.14.1-r200728.14.1-r200738.14.1-r300788.14.1-r200748.14.1-r200758.14.1-r200768.14.1-r200778.14.1-r300798.14.1-r3007108.14.1-r3007118.14.1-r300712
rootio-curl
Root:Alpine:3.21
 before 8.14.1-r20072
8.14.1-r200728.14.1-r200738.14.1-r300788.14.1-r200748.14.1-r200758.14.1-r200768.14.1-r200778.14.1-r300798.14.1-r3007108.14.1-r3007118.14.1-r300712
curl
Root:Alpine:3.22
 before 8.14.1-r20072
8.14.1-r200728.14.1-r200718.14.1-r200738.14.1-r200748.14.1-r4007108.14.1-r300758.14.1-r300768.14.1-r300778.14.1-r300788.14.1-r30079
rootio-curl
Root:Alpine:3.22
 before 8.14.1-r20072
8.14.1-r200728.14.1-r200718.14.1-r200738.14.1-r200748.14.1-r4007108.14.1-r300758.14.1-r300768.14.1-r300778.14.1-r300788.14.1-r30079
curl
Root:Debian:13
 before 8.14.1-2+deb13u7.aikido.24
8.14.1-2+deb13u7.aikido.248.14.1-2+deb13u7.aikido.25
rootio-curl
Root:Debian:13
 before 8.14.1-2+deb13u7.aikido.24
8.14.1-2+deb13u7.aikido.248.14.1-2+deb13u7.aikido.25
curl
SUSE:Linux Micro 6.2
From an advisory covering 10 CVEs
 before 8.14.1-160000.8.1
8.14.1-160000.8.1
curl
SUSE:Linux Enterprise Server 16.0
From an advisory covering 10 CVEs
 before 8.14.1-160000.8.1
8.14.1-160000.8.1
curl-mini
SUSE:Linux Enterprise Server 16.0
From an advisory covering 10 CVEs
 before 8.14.1-160000.8.1
8.14.1-160000.8.1
curl
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 10 CVEs
 before 8.14.1-160000.8.1
8.14.1-160000.8.1
curl-mini
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 10 CVEs
 before 8.14.1-160000.8.1
8.14.1-160000.8.1
curl
SUSE:Linux Micro 6.0
From an advisory covering 10 CVEs
 before 8.14.1-7.1
8.14.1-7.1
curl
SUSE:Linux Micro 6.1
From an advisory covering 10 CVEs
 before 8.14.1-slfo.1.1_8.1
8.14.1-slfo.1.1_8.1
curl
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 11 CVEs
 before 8.14.1-150700.7.20.1
8.14.1-150700.7.20.1
curl
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 10 CVEs
 before 8.14.1-150600.4.46.1
8.14.1-150600.4.46.1
curl
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 10 CVEs
 before 8.14.1-150600.4.46.1
8.14.1-150600.4.46.1
curl
SUSE:Linux Enterprise Installer Updates 15 SP4
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise Installer Updates 15 SP5
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 10 CVEs
 before 8.14.1-150400.5.86.1
8.14.1-150400.5.86.1
curl
Ubuntu:25.10
 before 8.14.1-2ubuntu1.4, plus listed versions
8.12.1-3ubuntu18.13.0-5ubuntu18.14.1-1ubuntu28.14.1-1ubuntu38.14.1-2ubuntu18.14.1-2ubuntu1.18.14.1-2ubuntu1.28.14.1-2ubuntu1.3
8.14.1-2ubuntu1.4
curl
Ubuntu:26.10
 before 8.20.0-2ubuntu11, plus listed versions
8.18.0-1ubuntu28.20.0-2ubuntu18.20.0-2ubuntu38.20.0-2ubuntu10
8.20.0-2ubuntu11
curl
Ubuntu:26.04:LTS
 before 8.18.0-1ubuntu2.2, plus listed versions
8.14.1-2ubuntu18.17.0-1ubuntu18.18.0-1ubuntu18.18.0-1ubuntu28.18.0-1ubuntu2.1
8.18.0-1ubuntu2.2
curl
Ubuntu:Pro:16.04:LTS
From an advisory covering 8 CVEs
 before 7.47.0-1ubuntu2.19+esm20, plus listed versions
7.43.0-1ubuntu27.45.0-1ubuntu17.46.0-1ubuntu17.47.0-1ubuntu17.47.0-1ubuntu2
Show 34 moreShow less
7.47.0-1ubuntu2.17.47.0-1ubuntu2.27.47.0-1ubuntu2.37.47.0-1ubuntu2.47.47.0-1ubuntu2.57.47.0-1ubuntu2.67.47.0-1ubuntu2.77.47.0-1ubuntu2.87.47.0-1ubuntu2.97.47.0-1ubuntu2.117.47.0-1ubuntu2.127.47.0-1ubuntu2.137.47.0-1ubuntu2.147.47.0-1ubuntu2.157.47.0-1ubuntu2.167.47.0-1ubuntu2.187.47.0-1ubuntu2.197.47.0-1ubuntu2.19+esm17.47.0-1ubuntu2.19+esm27.47.0-1ubuntu2.19+esm37.47.0-1ubuntu2.19+esm47.47.0-1ubuntu2.19+esm57.47.0-1ubuntu2.19+esm67.47.0-1ubuntu2.19+esm77.47.0-1ubuntu2.19+esm87.47.0-1ubuntu2.19+esm97.47.0-1ubuntu2.19+esm107.47.0-1ubuntu2.19+esm117.47.0-1ubuntu2.19+esm127.47.0-1ubuntu2.19+esm137.47.0-1ubuntu2.19+esm157.47.0-1ubuntu2.19+esm167.47.0-1ubuntu2.19+esm177.47.0-1ubuntu2.19+esm18
7.47.0-1ubuntu2.19+esm20
curl
Ubuntu:Pro:18.04:LTS
From an advisory covering 8 CVEs
 before 7.58.0-2ubuntu3.24+esm14, plus listed versions
7.55.1-1ubuntu27.55.1-1ubuntu2.17.57.0-1ubuntu17.58.0-2ubuntu17.58.0-2ubuntu2
Show 34 moreShow less
7.58.0-2ubuntu37.58.0-2ubuntu3.17.58.0-2ubuntu3.27.58.0-2ubuntu3.37.58.0-2ubuntu3.57.58.0-2ubuntu3.67.58.0-2ubuntu3.77.58.0-2ubuntu3.87.58.0-2ubuntu3.97.58.0-2ubuntu3.107.58.0-2ubuntu3.127.58.0-2ubuntu3.137.58.0-2ubuntu3.147.58.0-2ubuntu3.157.58.0-2ubuntu3.167.58.0-2ubuntu3.177.58.0-2ubuntu3.187.58.0-2ubuntu3.197.58.0-2ubuntu3.207.58.0-2ubuntu3.217.58.0-2ubuntu3.227.58.0-2ubuntu3.237.58.0-2ubuntu3.247.58.0-2ubuntu3.24+esm17.58.0-2ubuntu3.24+esm27.58.0-2ubuntu3.24+esm37.58.0-2ubuntu3.24+esm47.58.0-2ubuntu3.24+esm57.58.0-2ubuntu3.24+esm77.58.0-2ubuntu3.24+esm87.58.0-2ubuntu3.24+esm97.58.0-2ubuntu3.24+esm107.58.0-2ubuntu3.24+esm117.58.0-2ubuntu3.24+esm12
7.58.0-2ubuntu3.24+esm14
curl
Ubuntu:Pro:20.04:LTS
From an advisory covering 8 CVEs
 before 7.68.0-1ubuntu2.25+esm9, plus listed versions
7.65.3-1ubuntu37.65.3-1ubuntu47.66.0-1ubuntu17.67.0-2ubuntu17.68.0-1ubuntu1
Show 28 moreShow less
7.68.0-1ubuntu27.68.0-1ubuntu2.17.68.0-1ubuntu2.27.68.0-1ubuntu2.47.68.0-1ubuntu2.57.68.0-1ubuntu2.67.68.0-1ubuntu2.77.68.0-1ubuntu2.107.68.0-1ubuntu2.117.68.0-1ubuntu2.127.68.0-1ubuntu2.137.68.0-1ubuntu2.147.68.0-1ubuntu2.157.68.0-1ubuntu2.167.68.0-1ubuntu2.187.68.0-1ubuntu2.197.68.0-1ubuntu2.207.68.0-1ubuntu2.217.68.0-1ubuntu2.227.68.0-1ubuntu2.237.68.0-1ubuntu2.247.68.0-1ubuntu2.257.68.0-1ubuntu2.25+esm27.68.0-1ubuntu2.25+esm37.68.0-1ubuntu2.25+esm47.68.0-1ubuntu2.25+esm57.68.0-1ubuntu2.25+esm67.68.0-1ubuntu2.25+esm7
7.68.0-1ubuntu2.25+esm9
curl
Ubuntu:22.04:LTS
From an advisory covering 8 CVEs
 before 7.81.0-1ubuntu1.29, plus listed versions
7.74.0-1.3ubuntu27.74.0-1.3ubuntu37.80.0-37.81.0-17.81.0-1ubuntu1.1
Show 23 moreShow less
7.81.0-1ubuntu1.27.81.0-1ubuntu1.37.81.0-1ubuntu1.47.81.0-1ubuntu1.67.81.0-1ubuntu1.77.81.0-1ubuntu1.87.81.0-1ubuntu1.107.81.0-1ubuntu1.117.81.0-1ubuntu1.137.81.0-1ubuntu1.147.81.0-1ubuntu1.157.81.0-1ubuntu1.167.81.0-1ubuntu1.177.81.0-1ubuntu1.187.81.0-1ubuntu1.197.81.0-1ubuntu1.207.81.0-1ubuntu1.217.81.0-1ubuntu1.227.81.0-1ubuntu1.237.81.0-1ubuntu1.247.81.0-1ubuntu1.257.81.0-1ubuntu1.267.81.0-1ubuntu1.27
7.81.0-1ubuntu1.29
curl
Ubuntu:24.04:LTS
From an advisory covering 8 CVEs
 before 8.5.0-2ubuntu10.15, plus listed versions
8.2.1-1ubuntu38.2.1-1ubuntu3.18.4.0-2ubuntu18.5.0-2ubuntu18.5.0-2ubuntu2
Show 16 moreShow less
8.5.0-2ubuntu88.5.0-2ubuntu98.5.0-2ubuntu108.5.0-2ubuntu10.18.5.0-2ubuntu10.28.5.0-2ubuntu10.38.5.0-2ubuntu10.48.5.0-2ubuntu10.58.5.0-2ubuntu10.68.5.0-2ubuntu10.78.5.0-2ubuntu10.88.5.0-2ubuntu10.98.5.0-2ubuntu10.108.5.0-2ubuntu10.118.5.0-2ubuntu10.128.5.0-2ubuntu10.13
8.5.0-2ubuntu10.15
curl
Ubuntu:26.04:LTS
From an advisory covering 8 CVEs
 before 8.18.0-1ubuntu2.7, plus listed versions
8.14.1-2ubuntu18.17.0-1ubuntu18.18.0-1ubuntu18.18.0-1ubuntu28.18.0-1ubuntu2.1
Show 4 moreShow less
8.18.0-1ubuntu2.28.18.0-1ubuntu2.38.18.0-1ubuntu2.48.18.0-1ubuntu2.5
8.18.0-1ubuntu2.7
curl
openSUSE:Tumbleweed
From an advisory covering 18 CVEs
 before 8.21.0-1.1
8.21.0-1.1
curl
openSUSE:Leap 16.0
From an advisory covering 10 CVEs
 before 8.14.1-160000.8.1
8.14.1-160000.8.1

History

History
RecordedChangedSources
affected, facts
affectedOSV
affectedOSV
affectedOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-9080 is a high vulnerability (CVSS 7.3) in Curl, published June 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.49%, the 42nd percentile. Fixed in curl 8.22.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 43 versions and 35 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open