Known vulnerabilities in curl
Vendor:
SUSE
Software:
curl
Software CPE:
cpe:2.3:o:suse:curl:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
90
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
8.14.1-150700.7.23.1
8.14.1-150400.5.86.1
8.14.1-150600.4.46.1
8.14.1-150700.7.20.1
8.0.1-11.123.1
8.14.1-150700.7.17.1
8.14.1-150600.4.43.1
8.14.1-150400.5.83.1
8.0.1-11.120.1
8.14.1-150400.5.80.1
8.14.1-150700.7.14.1
8.14.1-150600.4.40.1
8.14.1-150200.4.103.1
8.14.1-150400.5.77.1
8.0.1-11.117.1
8.0.1-11.114.1
8.14.1-150200.4.100.1
8.14.1-150600.4.37.1
8.0.1-11.111.1
8.14.1-150700.7.8.1
8.14.1-150200.4.97.1
8.14.1-150600.4.34.1
8.14.1-150400.5.72.1
8.14.1-150700.7.5.1
8.14.1-150600.4.31.1
8.14.1-150200.4.94.1
8.14.1-150700.7.2.1
8.14.1-150200.4.91.1
8.14.1-150400.5.69.1
8.14.1-150600.4.28.1
8.0.1-11.108.1
7.66.0-150200.4.84.1
8.0.1-11.105.1
8.0.1-150400.5.62.1
8.6.0-150600.4.21.1
8.0.1-150400.5.59.1
8.0.1-11.101.1
7.66.0-150200.4.81.1
8.6.0-150600.4.15.1
8.0.1-11.98.1
8.0.1-150400.5.56.1
8.6.0-150600.4.12.1
8.0.1-150400.5.53.2
8.6.0-150600.4.9.2
8.0.1-11.95.2
8.0.1-150400.5.50.1
8.6.0-150600.4.6.1
8.0.1-11.92.1
7.66.0-150200.4.78.1
8.0.1-150400.5.47.1
8.0.1-11.89.1
7.66.0-150200.4.75.1
8.6.0-150600.4.3.1
7.66.0-150200.4.72.1
8.0.1-150400.5.44.1
8.0.1-11.86.2
7.66.0-150200.4.69.1
7.66.0-150200.4.63.1
7.60.0-150000.56.1
8.0.1-11.80.1
8.0.1-150400.5.36.1
8.0.1-11.74.1
8.0.1-150400.5.32.1
7.66.0-150200.4.60.1
8.0.1-150400.5.29.1
8.0.1-11.71.1
8.0.1-150400.5.26.1
8.0.1-11.68.1
7.66.0-150200.4.57.1
7.60.0-4.56.1
8.0.1-150400.5.23.1
8.0.1-11.65.2
7.60.0-150000.51.1
7.66.0-150200.4.52.1
7.79.1-150400.5.18.1
7.60.0-11.60.1
7.66.0-150200.4.33.1
7.60.0-11.40.2
7.60.0-11.37.1
7.66.0-150200.4.30.1
7.79.1-150400.5.15.1
7.60.0-11.55.1
7.66.0-150200.4.45.1
7.60.0-11.52.1
7.79.1-150400.5.12.1
7.79.1-150400.5.9.1
7.66.0-150200.4.42.1
7.60.0-4.43.1
7.60.0-150000.38.1
7.37.0-37.85.1
7.60.0-11.49.1
7.60.0-11.46.1
7.66.0-150200.4.39.1
7.79.1-150400.5.6.1
7.60.0-150000.33.1
7.60.0-4.38.1
7.37.0-37.79.1
7.66.0-150200.4.36.1
7.79.1-150400.5.3.1
7.60.0-4.30.1
7.60.0-11.28.1
7.60.0-25.1
7.60.0-11.23.1
7.60.0-3.47.1
7.66.0-4.22.1
7.60.0-4.25.1
7.37.0-70.66.1
7.60.0-3.42.1
7.60.0-4.20.1
7.60.0-11.18.1
7.66.0-4.17.1
7.60.0-11.15.1
7.66.0-4.14.1
Vulnerabilities (90)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135089 - Improper Validation of Certificate with Host Mismatch CVE-2026-9547 |
CWE-297 | Medium | 8.0.1-11.126.1, 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 7 more |
||
| #VU135087 - Exposure of sensitive information to an unauthorized actor CVE-2026-9545 |
CWE-200 | Low | 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 4 more |
||
| #VU135086 - Use After Free CVE-2026-9080 |
CWE-416 | Low | 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 4 more |
||
| #VU135085 - Insufficiently Protected Credentials CVE-2026-9079 |
CWE-522 | Low | 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 3 more |
||
| #VU135084 - Insufficiently Protected Credentials CVE-2026-8926 |
CWE-522 | Low | 8.14.1-150700.7.23.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026072507 and 6 more |
||
| #VU135082 - Insertion of Sensitive Information Into Sent Data CVE-2026-8924 |
CWE-201 | Medium | 8.0.1-11.126.1, 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 7 more |
||
| #VU135081 - Improper Certificate Validation CVE-2026-8286 |
CWE-295 | Medium | 8.0.1-11.126.1, 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 6 more |
||
| #VU135080 - Improper Validation of Certificate with Host Mismatch CVE-2026-12064 |
CWE-297 | Medium | 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026071466 and 4 more |
||
| #VU135077 - Authentication Bypass by Capture-replay CVE-2026-8927 |
CWE-294 | Low | 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 5 more |
||
| #VU135076 - Exposure of Data Element to Wrong Session CVE-2026-8458 |
CWE-488 | Low | 8.0.1-11.126.1, 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026070135 SB2026071466 and 4 more |
||
| #VU135070 - Use After Free CVE-2026-10536 |
CWE-416 | Low | 8.0.1-11.126.1, 8.14.1-150400.5.86.1, 8.14.1-150600.4.46.1, 8.14.1-150700.7.20.1 | 24.06.2026 |
SB2026062427 SB2026071429 SB2026071466 and 4 more |
||
| #VU128460 - Authentication Bypass by Primary Weakness CVE-2026-5545 |
CWE-305 | Medium | 8.0.1-11.123.1, 8.14.1-150400.5.83.1, 8.14.1-150600.4.43.1, 8.14.1-150700.7.23.1 | 29.04.2026 |
SB2026042955 SB2026050481 SB2026050706 and 11 more |
||
| #VU128459 - Authentication Bypass by Capture-replay CVE-2026-7168 |
CWE-294 | Medium | 8.0.1-11.126.1, 8.14.1-150700.7.23.1 | 29.04.2026 |
SB2026042955 SB2026050481 SB2026052287 and 11 more |
||
| #VU128456 - Exposure of sensitive information to an unauthorized actor CVE-2026-6429 |
CWE-200 | Medium | 8.0.1-11.123.1, 8.14.1-150400.5.83.1, 8.14.1-150600.4.43.1, 8.14.1-150700.7.23.1 | 29.04.2026 |
SB2026042955 SB2026050481 SB2026050706 and 10 more |
||
| #VU128455 - Origin Validation Error CVE-2026-6276 |
CWE-346 | Medium | 8.0.1-11.123.1, 8.14.1-150400.5.83.1, 8.14.1-150600.4.43.1, 8.14.1-150700.7.23.1 | 29.04.2026 |
SB2026042955 SB2026050481 SB2026050706 and 10 more |
||
| #VU128454 - Insufficiently Protected Credentials CVE-2026-6253 |
CWE-522 | Medium | 8.0.1-11.123.1, 8.14.1-150400.5.83.1, 8.14.1-150600.4.43.1, 8.14.1-150700.7.23.1 | 29.04.2026 |
SB2026042955 SB2026050481 SB2026050706 and 10 more |
||
| #VU128451 - Exposure of Data Element to Wrong Session CVE-2026-5773 |
CWE-488 | Medium | 8.0.1-11.123.1, 8.14.1-150700.7.23.1 | 29.04.2026 |
SB2026042955 SB2026050481 SB2026052032 and 9 more |
||
| #VU128445 - Cleartext Transmission of Sensitive Information CVE-2026-4873 |
CWE-319 | Medium | 8.0.1-11.123.1, 8.14.1-150400.5.83.1, 8.14.1-150600.4.43.1, 8.14.1-150700.7.20.1 | 29.04.2026 |
SB2026042955 SB2026050481 SB2026050706 and 10 more |
||
| #VU123888 - Authentication Bypass by Primary Weakness CVE-2026-1965 |
CWE-305 | Medium | 8.0.1-11.120.1, 8.14.1-150200.4.103.1, 8.14.1-150400.5.80.1, 8.14.1-150400.5.83.1, 8.14.1-150600.4.40.1, 8.14.1-150600.4.43.1, 8.14.1-150700.7.14.1 | 11.03.2026 |
SB2026031143 SB2026031238 SB2026031262 and 13 more |
||
| #VU123886 - Insufficiently Protected Credentials CVE-2026-3783 |
CWE-522 | Medium | 8.0.1-11.120.1, 8.14.1-150200.4.103.1, 8.14.1-150400.5.80.1, 8.14.1-150600.4.40.1, 8.14.1-150700.7.14.1 | 11.03.2026 |
SB2026031143 SB2026031238 SB2026031262 and 18 more |
Showing elements 1 - 20 out of 90