{"id":"CVE-2026-82208","title":"With the wolfSSL backend, when CA caching is enabled and an\n`CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can\nsilently reinstall the cached store after the callback returns","summary":"With the wolfSSL backend, when CA caching is enabled and an\n`CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can\nsilently reinstall the cached store after the callback returns. A certificate\ntrusted by the cached sto…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwe":["CWE-295"],"vendor":"haxx","product":"curl","affected":["curl >= 8.9.1, < 8.22.0"],"patched":["curl 8.22.0"],"published":"2026-09-06","updated":"2026-09-15","sourceUpdated":"2026-09-15T07:16:31.050","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-82208","references":[{"url":"https://curl.se/docs/CVE-2026-82208.html","label":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"url":"https://curl.se/docs/CVE-2026-82208.json","label":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"url":"https://hackerone.com/reports/3973090","label":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-82208.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-82208"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529202"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-82208"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-82208"}],"tags":["nvd","cve.org","exploit-available","csaf","vex","red-hat","score-dispute"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-08T18:46:24.528833Z"},"epss":0.00425,"epssPercentile":0.36421,"ingestedAt":"2026-09-07T11:09:35.724Z","scores":{"nvd":7.5,"vendor":4.8},"slug":"CVE-2026-82208","body":"## Overview\n\nWith the wolfSSL backend, when CA caching is enabled and an\n`CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can\nsilently reinstall the cached store after the callback returns. A certificate\ntrusted by the cached store but rejected by the callback-selected store is\nthen incorrectly accepted.\n\n## Affected\n\n- `curl >= 8.9.1, < 8.22.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `curl 8.22.0`\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Confidential Compute Attestation, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, … · updated 2026-09-22 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-82208.json)","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":8253,"id":"CVE-2026-82208","ts":1788919995095,"field":"exploit_available","old":"false","new":"true"},{"seq":8252,"id":"CVE-2026-82208","ts":1788919995095,"field":"cvss","old":null,"new":"7.5"},{"seq":8251,"id":"CVE-2026-82208","ts":1788919995095,"field":"severity","old":"none","new":"high"},{"seq":8062,"id":"CVE-2026-82208","ts":1788919281008,"field":"exploit_available","old":"true","new":"false"},{"seq":8061,"id":"CVE-2026-82208","ts":1788919281008,"field":"cvss","old":"7.5","new":null},{"seq":8060,"id":"CVE-2026-82208","ts":1788919281008,"field":"severity","old":"high","new":"none"},{"seq":7871,"id":"CVE-2026-82208","ts":1788916356159,"field":"exploit_available","old":"false","new":"true"},{"seq":7870,"id":"CVE-2026-82208","ts":1788916356159,"field":"cvss","old":null,"new":"7.5"},{"seq":7869,"id":"CVE-2026-82208","ts":1788916356159,"field":"severity","old":"none","new":"high"},{"seq":7680,"id":"CVE-2026-82208","ts":1788915297707,"field":"exploit_available","old":"true","new":"false"},{"seq":7679,"id":"CVE-2026-82208","ts":1788915297707,"field":"cvss","old":"7.5","new":null},{"seq":7678,"id":"CVE-2026-82208","ts":1788915297707,"field":"severity","old":"high","new":"none"},{"seq":7489,"id":"CVE-2026-82208","ts":1788912716815,"field":"exploit_available","old":"false","new":"true"},{"seq":7488,"id":"CVE-2026-82208","ts":1788912716815,"field":"cvss","old":null,"new":"7.5"},{"seq":7487,"id":"CVE-2026-82208","ts":1788912716815,"field":"severity","old":"none","new":"high"},{"seq":7298,"id":"CVE-2026-82208","ts":1788911331640,"field":"exploit_available","old":"true","new":"false"},{"seq":7297,"id":"CVE-2026-82208","ts":1788911331640,"field":"cvss","old":"7.5","new":null},{"seq":7296,"id":"CVE-2026-82208","ts":1788911331640,"field":"severity","old":"high","new":"none"},{"seq":7102,"id":"CVE-2026-82208","ts":1788909078444,"field":"exploit_available","old":"false","new":"true"},{"seq":7101,"id":"CVE-2026-82208","ts":1788909078444,"field":"cvss","old":null,"new":"7.5"},{"seq":7100,"id":"CVE-2026-82208","ts":1788909078444,"field":"severity","old":"none","new":"high"},{"seq":6914,"id":"CVE-2026-82208","ts":1788907391740,"field":"exploit_available","old":"true","new":"false"},{"seq":6913,"id":"CVE-2026-82208","ts":1788907391740,"field":"cvss","old":"7.5","new":null},{"seq":6912,"id":"CVE-2026-82208","ts":1788907391740,"field":"severity","old":"high","new":"none"},{"seq":6716,"id":"CVE-2026-82208","ts":1788905444138,"field":"exploit_available","old":"false","new":"true"},{"seq":6715,"id":"CVE-2026-82208","ts":1788905444138,"field":"cvss","old":null,"new":"7.5"},{"seq":6714,"id":"CVE-2026-82208","ts":1788905444138,"field":"severity","old":"none","new":"high"},{"seq":6534,"id":"CVE-2026-82208","ts":1788903459966,"field":"exploit_available","old":"true","new":"false"},{"seq":6533,"id":"CVE-2026-82208","ts":1788903459966,"field":"cvss","old":"7.5","new":null},{"seq":6532,"id":"CVE-2026-82208","ts":1788903459966,"field":"severity","old":"high","new":"none"},{"seq":6320,"id":"CVE-2026-82208","ts":1788901810770,"field":"exploit_available","old":"false","new":"true"},{"seq":6319,"id":"CVE-2026-82208","ts":1788901810770,"field":"cvss","old":null,"new":"7.5"},{"seq":6318,"id":"CVE-2026-82208","ts":1788901810770,"field":"severity","old":"none","new":"high"},{"seq":6150,"id":"CVE-2026-82208","ts":1788899562365,"field":"exploit_available","old":"true","new":"false"},{"seq":6149,"id":"CVE-2026-82208","ts":1788899562365,"field":"cvss","old":"7.5","new":null},{"seq":6148,"id":"CVE-2026-82208","ts":1788899562365,"field":"severity","old":"high","new":"none"},{"seq":5945,"id":"CVE-2026-82208","ts":1788898179973,"field":"exploit_available","old":"false","new":"true"},{"seq":5944,"id":"CVE-2026-82208","ts":1788898179973,"field":"cvss","old":null,"new":"7.5"},{"seq":5943,"id":"CVE-2026-82208","ts":1788898179973,"field":"severity","old":"none","new":"high"},{"seq":5834,"id":"CVE-2026-82208","ts":1788895711331,"field":"exploit_available","old":"true","new":"false"},{"seq":5833,"id":"CVE-2026-82208","ts":1788895711331,"field":"cvss","old":"7.5","new":null},{"seq":5832,"id":"CVE-2026-82208","ts":1788895711331,"field":"severity","old":"high","new":"none"},{"seq":5746,"id":"CVE-2026-82208","ts":1788894572819,"field":"exploit_available","old":"false","new":"true"},{"seq":5745,"id":"CVE-2026-82208","ts":1788894572819,"field":"cvss","old":null,"new":"7.5"},{"seq":5744,"id":"CVE-2026-82208","ts":1788894572819,"field":"severity","old":"none","new":"high"}]}