Known vulnerabilities in cURL 7.77.0

Software: cURL
Version: 7.77.0
Software CPE: cpe:2.3:a:curl_haxx_se:curl:*:*:*:*:*:*:*:*
Total vulnerabilities: 69
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting cURL version 7.77.0 cURL 7.77.0 is affected by 69 vulnerabilities: 2 high, 43 medium, 24 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547
CWE-297 Medium
No
No
8.21.0 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 7 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924
CWE-201 Medium
No
No
8.21.0 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 7 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286
CWE-295 Medium
No
No
8.21.0 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 6 more
#VU135079 - Authentication Bypass by Primary Weakness
CVE-2026-8932
CWE-305 Low
No
No
8.21.0 24.06.2026 SB2026062427
SB2026081995
SB2026082669
and 1 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927
CWE-294 Low
No
No
8.21.0 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 5 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458
CWE-488 Low
No
No
8.21.0 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 4 more
#VU135075 - Authentication Bypass by Capture-replay
CVE-2026-11856
CWE-294 Medium
No
No
8.21.0 24.06.2026 SB2026062427
SB2026080303
SB2026080441
and 2 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545
CWE-305 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168
CWE-294 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 11 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429
CWE-200 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276
CWE-346 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253
CWE-522 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773
CWE-488 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 9 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873
CWE-319 Medium
No
No
8.20.0 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU123889 - Authentication Bypass by Primary Weakness
CVE-2026-3784
CWE-305 Medium
No
No
8.19.0 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 18 more
#VU123888 - Authentication Bypass by Primary Weakness
CVE-2026-1965
CWE-305 Medium
No
No
8.19.0 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 13 more
#VU123886 - Insufficiently Protected Credentials
CVE-2026-3783
CWE-522 Medium
No
No
8.19.0 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 18 more
#VU121029 - Improper Validation of Certificate with Host Mismatch
CVE-2025-15079
CWE-297 Low
No
No
8.18.0 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 15 more
#VU121026 - Insufficiently Protected Credentials
CVE-2025-14524
CWE-522 Low
No
No
8.18.0 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 23 more
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context
CVE-2025-14017
CWE-567 Low
No
No
8.18.0 07.01.2026 SB2026010741
SB2026010915
SB2026010935
and 12 more


Showing elements 1 - 20 out of 69