Known vulnerabilities in curl (Red Hat package)
Vendor:
Red Hat Inc.
Software:
curl (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:curl_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
54
Public exploits:
1
Known exploited (KEV):
0
Breakdown by Severity Chart
7.76.1-40.el9_8.9
7.61.1-34.el8_10.18
7.76.1-40.el9_8.8
8.12.1-1.el10_0.10
7.76.1-40.el9_8.7
7.76.1-40.el9_8.5
7.61.1-34.el8_10.13
7.76.1-40.el9
8.12.1-2.el10_1.2
8.12.1-1.el10_0.4
7.76.1-35.el9_7.3
7.76.1-31.el9
7.76.1-23.el9_2.8
7.76.1-14.el9_0.12
7.76.1-29.el9_4.3
7.76.1-31.el9_6.2
7.76.1-34.el9
7.76.1-31.el9_6.1
7.76.1-29.el9_4.1
7.76.1-23.el9_2.7
7.19.7-37.el6_5.3
7.12.1-11.1.el4_8.3
7.12.1-11.1.el4_8.1
7.15.5-2.1.el5_3.5
7.12.1-11.1.el4_7.1
7.15.5-2.1.el5_3.4
7.61.1-33.el8_9.5
7.76.1-26.el9_3.3
7.61.1-30.el8_8.9
7.76.1-23.el9_2.6
7.76.1-14.el9_0.11
7.29.0-59.el7_9.2
7.61.1-30.el8_8.6
7.76.1-26.el9
7.76.1-26.el9_3.2
7.61.1-22.el8_6.9
7.76.1-23.el9_2.4
7.76.1-14.el9_0.9
7.76.1-14.el9_0.7
7.61.1-30.el8_8.3
7.76.1-23.el9_2.2
7.76.1-14.el9_0.6
7.61.1-18.el8_4.3
7.61.1-30.el8
7.61.1-30.el8_8.2
7.76.1-23.el9
7.76.1-23.el9_2.1
7.61.1-22.el8_6.6
7.76.1-19.el9_1.2
7.61.1-25.el8_7.3
7.76.1-19.el9_1.1
7.76.1-19.el9
7.61.1-22.el8_6.4
7.76.1-14.el9_0.5
7.61.1-22.el8_6.3
7.61.1-12.el8_2.4
7.61.1-22.el8
7.61.1-18.el8_4.2
7.61.1-12.el8_2.3
7.61.1-18.el8_4.1
7.61.1-18.el8
7.29.0-54.el7_7.4
7.29.0-51.el7_6.4
7.29.0-42.el7_4.3
7.61.1-12.el8_2.2
7.29.0-59.el7_9.1
7.61.1-14.el8
7.29.0-59.el7
7.29.0-54.el7_7.3
7.61.1-12.el8
7.29.0-57.el7
7.61.1-11.el8
7.29.0-54.el7
7.29.0-51.el7
7.29.0-42.el7
7.15.5-9.el5
7.12.1-17.el4
7.15.5-16.el5_9
7.15.5-17.el5_9
7.29.0-25.el7
7.29.0-35.el7
7.29.0-32.el7
7.19.7-54.el6_10
7.19.7-53.el6_9
7.19.7-52.el6
7.19.7-46.el6
7.19.7-40.el6_6
7.19.7-37.el6_5
7.19.7-37.el6_4
7.19.7-36.el6_4
7.19.7-35.el6
7.19.7-26.el6_2
7.19.7-26.el6_1
7.19.7-26.el6
7.19.7-16.el6
Vulnerabilities (54)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135089 - Improper Validation of Certificate with Host Mismatch CVE-2026-9547 |
CWE-297 | Medium | 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 14 more |
||
| #VU135085 - Insufficiently Protected Credentials CVE-2026-9079 |
CWE-522 | Low | 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 12 more |
||
| #VU135084 - Insufficiently Protected Credentials CVE-2026-8926 |
CWE-522 | Low | 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026072507 and 15 more |
||
| #VU135082 - Insertion of Sensitive Information Into Sent Data CVE-2026-8924 |
CWE-201 | Medium | 7.61.1-34.el8_10.18, 7.76.1-40.el9_8.8, 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 17 more |
||
| #VU135081 - Improper Certificate Validation CVE-2026-8286 |
CWE-295 | Medium | 7.61.1-34.el8_10.13, 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 17 more |
||
| #VU135080 - Improper Validation of Certificate with Host Mismatch CVE-2026-12064 |
CWE-297 | Medium | 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026071466 and 11 more |
||
| #VU135079 - Authentication Bypass by Primary Weakness CVE-2026-8932 |
CWE-305 | Low | 7.61.1-34.el8_10.18, 7.76.1-40.el9_8.9, 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026081995 SB2026082669 and 14 more |
||
| #VU135077 - Authentication Bypass by Capture-replay CVE-2026-8927 |
CWE-294 | Low | 7.61.1-34.el8_10.18, 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 17 more |
||
| #VU135076 - Exposure of Data Element to Wrong Session CVE-2026-8458 |
CWE-488 | Low | 7.61.1-34.el8_10.18, 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 15 more |
||
| #VU135075 - Authentication Bypass by Capture-replay CVE-2026-11856 |
CWE-294 | Medium | 7.61.1-34.el8_10.18, 7.76.1-40.el9_8.8, 8.12.1-1.el10_0.10 | 24.06.2026 |
SB2026062427 SB2026080303 SB2026080441 and 17 more |
||
| #VU123889 - Authentication Bypass by Primary Weakness CVE-2026-3784 |
CWE-305 | Medium | 8.12.1-1.el10_0.10 | 11.03.2026 |
SB2026031143 SB2026031238 SB2026031262 and 19 more |
||
| #VU123888 - Authentication Bypass by Primary Weakness CVE-2026-1965 |
CWE-305 | Medium | 8.12.1-1.el10_0.10 | 11.03.2026 |
SB2026031143 SB2026031238 SB2026031262 and 15 more |
||
| #VU123886 - Insufficiently Protected Credentials CVE-2026-3783 |
CWE-522 | Medium | 8.12.1-1.el10_0.10 | 11.03.2026 |
SB2026031143 SB2026031238 SB2026031262 and 20 more |
||
| #VU121027 - Improper Certificate Validation CVE-2025-14819 |
CWE-295 | Low | 8.12.1-1.el10_0.10 | 07.01.2026 |
SB2026010741 SB2026010781 SB2026010782 and 16 more |
||
| #VU115138 - Out-of-bounds read CVE-2025-9086 |
CWE-125 | Low | 7.76.1-14.el9_0.12, 7.76.1-23.el9_2.8, 7.76.1-29.el9_4.3, 7.76.1-31.el9_6.2, 7.76.1-35.el9_7.3, 8.12.1-1.el10_0.4, 8.12.1-2.el10_1.2 | 10.09.2025 |
SB2025091034 SB2025091144 SB2025091301 and 44 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 7.76.1-23.el9_2.7, 7.76.1-29.el9_4.1 | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU83900 - Exposure of sensitive information to an unauthorized actor CVE-2023-46218 |
CWE-200 | Low | 7.61.1-30.el8_8.9, 7.61.1-33.el8_9.5, 7.76.1-14.el9_0.11, 7.76.1-23.el9_2.6, 7.76.1-26.el9_3.3 | 06.12.2023 |
SB2023120612 SB2023120644 SB2023120661 and 87 more |
||
| #VU81863 - External Control of File Name or Path CVE-2023-38546 |
CWE-73 | Low | 7.61.1-22.el8_6.9, 7.61.1-30.el8_8.6, 7.61.1-33.el8_9.5, 7.76.1-14.el9_0.9, 7.76.1-23.el9_2.4, 7.76.1-26.el9_3.2 | 11.10.2023 |
SB2023101129 SB2023101135 SB2023101149 and 125 more |
||
| #VU76238 - Expected Behavior Violation CVE-2023-28322 |
CWE-440 | Medium | 7.61.1-30.el8_8.9, 7.61.1-33.el8_9.5, 7.76.1-14.el9_0.7, 7.76.1-23.el9_2.2 | 17.05.2023 |
SB2023051752 SB2023051760 SB2023051761 and 88 more |
||
| #VU70456 - Use After Free CVE-2022-43552 |
CWE-416 | Low | 7.29.0-59.el7_9.2, 7.61.1-30.el8, 7.76.1-23.el9 | 21.12.2022 |
SB2022122102 SB2022122620 SB2022122621 and 66 more |
Showing elements 1 - 20 out of 54