Known vulnerabilities in curl

Vendor: OpenAnolis
Software: curl
Software CPE: cpe:2.3:o:openanolis:curl:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 53
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting curl curl is affected by 53 known vulnerabilities: 2 high, 31 medium, 20 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135089 - Improper Validation of Certificate with Host Mismatch
CVE-2026-9547		 CWE-297 Medium
No
No
 8.4.0-24 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 14 more
#VU135082 - Insertion of Sensitive Information Into Sent Data
CVE-2026-8924		 CWE-201 Medium
No
No
 8.4.0-24 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 15 more
#VU135081 - Improper Certificate Validation
CVE-2026-8286		 CWE-295 Medium
No
No
 7.61.1-35.0.2, 8.4.0-28 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 16 more
#VU135079 - Authentication Bypass by Primary Weakness
CVE-2026-8932		 CWE-305 Low
No
No
 8.4.0-25 24.06.2026 SB2026062427
SB2026081995
SB2026082669
and 10 more
#VU135077 - Authentication Bypass by Capture-replay
CVE-2026-8927		 CWE-294 Low
No
No
 8.4.0-24 24.06.2026 SB2026062427
SB2026070135
SB2026071466
and 15 more
#VU135075 - Authentication Bypass by Capture-replay
CVE-2026-11856		 CWE-294 Medium
No
No
 8.4.0-26 24.06.2026 SB2026062427
SB2026080303
SB2026080441
and 15 more
#VU135070 - Use After Free
CVE-2026-10536		 CWE-416 Low
No
No
 8.4.0-29 24.06.2026 SB2026062427
SB2026071429
SB2026071466
and 12 more
#VU128460 - Authentication Bypass by Primary Weakness
CVE-2026-5545		 CWE-305 Medium
No
No
 8.4.0-24 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 11 more
#VU128459 - Authentication Bypass by Capture-replay
CVE-2026-7168		 CWE-294 Medium
No
No
 8.4.0-19 29.04.2026 SB2026042955
SB2026050481
SB2026052287
and 13 more
#VU128456 - Exposure of sensitive information to an unauthorized actor
CVE-2026-6429		 CWE-200 Medium
No
No
 8.4.0-24 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128455 - Origin Validation Error
CVE-2026-6276		 CWE-346 Medium
No
No
 8.4.0-24 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128454 - Insufficiently Protected Credentials
CVE-2026-6253		 CWE-522 Medium
No
No
 8.4.0-24 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU128451 - Exposure of Data Element to Wrong Session
CVE-2026-5773		 CWE-488 Medium
No
No
 8.4.0-17 29.04.2026 SB2026042955
SB2026050481
SB2026052032
and 11 more
#VU128445 - Cleartext Transmission of Sensitive Information
CVE-2026-4873		 CWE-319 Medium
No
No
 8.4.0-18 29.04.2026 SB2026042955
SB2026050481
SB2026050706
and 10 more
#VU123889 - Authentication Bypass by Primary Weakness
CVE-2026-3784		 CWE-305 Medium
No
No
 8.4.0-15 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 19 more
#VU123888 - Authentication Bypass by Primary Weakness
CVE-2026-1965		 CWE-305 Medium
No
No
 8.4.0-15 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 15 more
#VU123886 - Insufficiently Protected Credentials
CVE-2026-3783		 CWE-522 Medium
No
No
 8.4.0-16 11.03.2026 SB2026031143
SB2026031238
SB2026031262
and 20 more
#VU121029 - Improper Validation of Certificate with Host Mismatch
CVE-2025-15079		 CWE-297 Low
No
No
 8.4.0-13 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 15 more
#VU121027 - Improper Certificate Validation
CVE-2025-14819		 CWE-295 Low
No
No
 8.4.0-13 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 16 more
#VU121026 - Insufficiently Protected Credentials
CVE-2025-14524		 CWE-522 Low
No
No
 8.4.0-13 07.01.2026 SB2026010741
SB2026010781
SB2026010782
and 23 more


Showing elements 1 - 20 out of 53