Known vulnerabilities in curl (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 94
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl (Ubuntu package) curl (Ubuntu package) is affected by 94 known vulnerabilities: 2 high, 53 medium, 38 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547
CWE-297 Medium
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 7 more
#VU135087 - Exposure of sensitive information to an unauthorized actor
CVE-2026-9545
CWE-200 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 5 more
#VU135086 - Use After Free
CVE-2026-9080
CWE-416 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 5 more
#VU135085 - Insufficiently Protected Credentials
CVE-2026-9079
CWE-522 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 3 more
#VU135084 - Insufficiently Protected Credentials
CVE-2026-8926
CWE-522 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026072507
and 6 more
#VU135083 - Double Free
CVE-2026-8925
CWE-415 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026081995
and 2 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924
CWE-201 Medium
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 7 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286
CWE-295 Medium
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 7 more
#VU135080 - Improper Validation of Certificate with Host Mismatch
CVE-2026-12064
CWE-297 Medium
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 5 more
#VU135079 - Authentication Bypass by Primary Weakness
CVE-2026-8932
CWE-305 Low
No
No
7.58.0-2ubuntu3.24+esm12, 7.68.0-1ubuntu2.25+esm7, 7.81.0-1ubuntu1.27, 8.5.0-2ubuntu10.13 24.06.2026 SB2026062427
SB2026081995
SB2026082669
and 1 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927
CWE-294 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 6 more
#VU135076 - Exposure of Data Element to Wrong Session
CVE-2026-8458
CWE-488 Low
No
No
7.35.0-1ubuntu2.20+esm20, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 4 more
#VU135075 - Authentication Bypass by Capture-replay
CVE-2026-11856
CWE-294 Medium
No
No
7.35.0-1ubuntu2.20+esm22, 7.47.0-1ubuntu2.19+esm18, 7.58.0-2ubuntu3.24+esm11, 7.68.0-1ubuntu2.25+esm6, 7.81.0-1ubuntu1.26, 8.5.0-2ubuntu10.12, 8.18.0-1ubuntu2.4 24.06.2026 SB2026062427
SB2026080303
SB2026080441
and 2 more
#VU135074 - Allocation of Resources Without Limits or Throttling
CVE-2026-11586
CWE-770 Medium
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3 24.06.2026 SB2026062427
SB2026071429
SB2026081995
and 1 more
#VU135073 - Improper Certificate Validation
CVE-2026-11564
CWE-295 Medium
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3 24.06.2026 SB2026062427
SB2026071429
SB2026081995
#VU135072 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2026-11352
CWE-835 Medium
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3 24.06.2026 SB2026062427
SB2026071429
SB2026081995
and 1 more
#VU135070 - Use After Free
CVE-2026-10536
CWE-416 Low
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 4 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545
CWE-305 Medium
No
No
7.35.0-1ubuntu2.20+esm21, 7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.3, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.1, 8.18.0-1ubuntu2.3 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253
CWE-522 Medium
No
No
7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873
CWE-319 Medium
No
No
7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more


Showing elements 1 - 20 out of 94