Known vulnerabilities in curl (Ubuntu package) 8.18.0-1ubuntu1 - page 2

Vendor: Canonical Ltd.

Software: curl (Ubuntu package)

Version: 8.18.0-1ubuntu1

Software CPE: cpe:2.3:o:canonical:curl_ubuntu_package:*:*:*:*:*:ubuntu:*:*

Website: https://www.ubuntu.com/

Total vulnerabilities: 42

Public exploits: 0

Known exploited (KEV): 0

Vulnerabilities by Severity

Vulnerabilities (42)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU135089 - Improper Validation of Certificate with Host Mismatch CVE-2026-9547	CWE-297	Medium	No	No	7.35.0-1ubuntu2.20+esm23, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 18 more
#VU135087 - Exposure of sensitive information to an unauthorized actor CVE-2026-9545	CWE-200	Low	No	No	7.35.0-1ubuntu2.20+esm23, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 12 more
#VU135086 - Use After Free CVE-2026-9080	CWE-416	Low	No	No	7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm20, 7.58.0-2ubuntu3.24+esm14, 7.68.0-1ubuntu2.25+esm9, 7.81.0-1ubuntu1.29, 8.5.0-2ubuntu10.15, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2, 8.18.0-1ubuntu2.7	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 13 more
#VU135085 - Insufficiently Protected Credentials CVE-2026-9079	CWE-522	Low	No	No	7.35.0-1ubuntu2.20+esm23, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 13 more
#VU135084 - Insufficiently Protected Credentials CVE-2026-8926	CWE-522	Low	No	No	7.35.0-1ubuntu2.20+esm23, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026072507 and 16 more
#VU135083 - Double Free CVE-2026-8925	CWE-415	Low	No	No	7.35.0-1ubuntu2.20+esm23, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026081995 and 9 more
#VU135082 - Insertion of Sensitive Information Into Sent Data CVE-2026-8924	CWE-201	Medium	No	No	7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.58.0-2ubuntu3.24+esm9, 7.68.0-1ubuntu2.25+esm4, 7.81.0-1ubuntu1.25, 8.5.0-2ubuntu10.10, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 19 more
#VU135080 - Improper Validation of Certificate with Host Mismatch CVE-2026-12064	CWE-297	Medium	No	No	8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3	24.06.2026	SB2026062427 SB2026071429 SB2026071466 and 15 more
#VU135077 - Authentication Bypass by Capture-replay CVE-2026-8927	CWE-294	Low	No	No	7.35.0-1ubuntu2.20+esm20, 7.35.0-1ubuntu2.20+esm23, 7.47.0-1ubuntu2.19+esm16, 7.47.0-1ubuntu2.19+esm20, 7.58.0-2ubuntu3.24+esm9, 7.58.0-2ubuntu3.24+esm14, 7.68.0-1ubuntu2.25+esm4, 7.68.0-1ubuntu2.25+esm9, 7.81.0-1ubuntu1.25, 7.81.0-1ubuntu1.29, 8.5.0-2ubuntu10.10, 8.5.0-2ubuntu10.15, 8.14.1-2ubuntu1.4, 8.18.0-1ubuntu2.2, 8.18.0-1ubuntu2.7	24.06.2026	SB2026062427 SB2026070135 SB2026071466 and 19 more
#VU135074 - Allocation of Resources Without Limits or Throttling CVE-2026-11586	CWE-770	Medium	No	No	8.18.0-1ubuntu2.3	24.06.2026	SB2026062427 SB2026071429 SB2026081995 and 9 more
#VU135073 - Improper Certificate Validation CVE-2026-11564	CWE-295	Medium	No	No	8.18.0-1ubuntu2.3	24.06.2026	SB2026062427 SB2026071429 SB2026081995 and 9 more
#VU135072 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-11352	CWE-835	Medium	No	No	8.18.0-1ubuntu2.3	24.06.2026	SB2026062427 SB2026071429 SB2026081995 and 9 more
#VU135070 - Use After Free CVE-2026-10536	CWE-416	Low	No	No	8.5.0-2ubuntu10.11, 8.14.1-2ubuntu1.5, 8.18.0-1ubuntu2.3	24.06.2026	SB2026062427 SB2026071429 SB2026071466 and 13 more
#VU128460 - Authentication Bypass by Primary Weakness CVE-2026-5545	CWE-305	Medium	No	No	7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026050706 and 11 more
#VU128459 - Authentication Bypass by Capture-replay CVE-2026-7168	CWE-294	Medium	No	No	7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026052287 and 14 more
#VU128456 - Exposure of sensitive information to an unauthorized actor CVE-2026-6429	CWE-200	Medium	No	No	7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026050706 and 10 more
#VU128455 - Origin Validation Error CVE-2026-6276	CWE-346	Medium	No	No	7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026050706 and 10 more
#VU128454 - Insufficiently Protected Credentials CVE-2026-6253	CWE-522	Medium	No	No	7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026050706 and 10 more
#VU128451 - Exposure of Data Element to Wrong Session CVE-2026-5773	CWE-488	Medium	No	No	7.47.0-1ubuntu2.19+esm17, 7.58.0-2ubuntu3.24+esm10, 7.68.0-1ubuntu2.25+esm5, 7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026052032 and 11 more
#VU128445 - Cleartext Transmission of Sensitive Information CVE-2026-4873	CWE-319	Medium	No	No	7.81.0-1ubuntu1.24, 8.5.0-2ubuntu10.9, 8.14.1-2ubuntu1.3, 8.18.0-1ubuntu2.1	29.04.2026	SB2026042955 SB2026050481 SB2026050706 and 10 more

Showing elements 21 - 40 out of 42

Known vulnerabilities in curl (Ubuntu package) 8.18.0-1ubuntu1 - page 2

Vulnerabilities by Severity

Vulnerabilities (42)

Please verify you're human