{"id":"CVE-2026-8932","title":"libcurl would reuse a previously created connection even when some mTLS config\nrelated option had been changed that should have prohibited reuse.\n\nlibcurl keeps previously used connections in a connection pool for subsequent\ntransfers to…","summary":"libcurl would reuse a previously created connection even when some mTLS config\nrelated option had been changed that should have prohibited reuse.\n\nlibcurl keeps previously used connections in a connection pool for subsequent\ntransfers to…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwe":["CWE-305","CWE-1025"],"vendor":"haxx","product":"curl","affected":["curl >= 7.7, < 8.21.0"],"patched":["curl 8.21.0"],"published":"2026-07-03","updated":"2026-09-15","sourceUpdated":"2026-09-15T07:16:33.407","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-8932","references":[{"url":"https://curl.se/docs/CVE-2026-8932.html","label":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"url":"https://curl.se/docs/CVE-2026-8932.json","label":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"url":"https://hackerone.com/reports/3733910","label":"2499f714-1537-4658-8207-48ae4bb9eae9"},{"url":"https://hackerone.com/reports/3733910","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8932.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-8932"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496759"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-8932"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-8932"},{"url":"https://access.redhat.com/errata/RHSA-2026:29017"},{"url":"https://access.redhat.com/errata/RHSA-2026:34975"},{"url":"https://access.redhat.com/errata/RHSA-2026:56869"},{"url":"https://access.redhat.com/errata/RHSA-2026:69125"}],"tags":["nvd","cve.org","exploit-available","csaf","vex","red-hat"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-07-06T16:58:28.124167Z"},"epss":0.00396,"epssPercentile":0.33585,"exploits":{"github":2,"githubRepos":["https://github.com/0xBlackash/CVE-2026-8932","https://github.com/nimaarek/CVE-2026-8932-PoC"],"checkedAt":"2026-09-21T15:31:16.653Z"},"ingestedAt":"2026-07-04T04:55:39.448Z","slug":"CVE-2026-8932","body":"## Overview\n\nlibcurl would reuse a previously created connection even when some mTLS config\nrelated option had been changed that should have prohibited reuse.\n\nlibcurl keeps previously used connections in a connection pool for subsequent\ntransfers to reuse if one of them matches the setup. However, some TLS\nsettings related to client certificates were left out from the configuration\nmatch checks, making them match too easily. In particular options related to\nthe private key.\n\n## Affected\n\n- `curl >= 7.7, < 8.21.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `curl 8.21.0`\n\n## Vendor advisories\n\n- **RHSA-2026:29017** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-06-24 · [advisory](https://access.redhat.com/errata/RHSA-2026:29017)\n- **RHSA-2026:34975** · Red Hat · fixed in: Red Hat Hardened Images · released 2026-07-02 · [advisory](https://access.redhat.com/errata/RHSA-2026:34975)\n- **RHSA-2026:56869** · Red Hat · fixed in: Red Hat JBoss Core Services 2.4.62.SP5 · released 2026-08-19 · [advisory](https://access.redhat.com/errata/RHSA-2026:56869)\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Confidential Compute Attestation, … · no fix planned: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, … · updated 2026-09-21 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-8932.json)\n- **RHSA-2026:69125** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10) · released 2026-09-21 · [advisory](https://access.redhat.com/errata/RHSA-2026:69125)","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202629,"id":"CVE-2026-8932","ts":1789400089335,"field":"cvss","old":null,"new":"7.5"},{"seq":202628,"id":"CVE-2026-8932","ts":1789400089335,"field":"severity","old":"none","new":"high"},{"seq":201356,"id":"CVE-2026-8932","ts":1789397620976,"field":"cvss","old":"7.5","new":null},{"seq":201355,"id":"CVE-2026-8932","ts":1789397620976,"field":"severity","old":"high","new":"none"},{"seq":200049,"id":"CVE-2026-8932","ts":1789395581849,"field":"cvss","old":null,"new":"7.5"},{"seq":200048,"id":"CVE-2026-8932","ts":1789395581849,"field":"severity","old":"none","new":"high"},{"seq":199286,"id":"CVE-2026-8932","ts":1789392261014,"field":"cvss","old":"7.5","new":null},{"seq":199285,"id":"CVE-2026-8932","ts":1789392261014,"field":"severity","old":"high","new":"none"},{"seq":197619,"id":"CVE-2026-8932","ts":1789384299902,"field":"cvss","old":null,"new":"7.5"},{"seq":197618,"id":"CVE-2026-8932","ts":1789384299902,"field":"severity","old":"none","new":"high"},{"seq":196893,"id":"CVE-2026-8932","ts":1789383783846,"field":"cvss","old":"7.5","new":null},{"seq":196892,"id":"CVE-2026-8932","ts":1789383783846,"field":"severity","old":"high","new":"none"},{"seq":195797,"id":"CVE-2026-8932","ts":1789380586834,"field":"cvss","old":null,"new":"7.5"},{"seq":195796,"id":"CVE-2026-8932","ts":1789380586834,"field":"severity","old":"none","new":"high"},{"seq":194748,"id":"CVE-2026-8932","ts":1789378790169,"field":"cvss","old":"7.5","new":null},{"seq":194747,"id":"CVE-2026-8932","ts":1789378790169,"field":"severity","old":"high","new":"none"},{"seq":193535,"id":"CVE-2026-8932","ts":1789376531353,"field":"cvss","old":null,"new":"7.5"},{"seq":193534,"id":"CVE-2026-8932","ts":1789376531353,"field":"severity","old":"none","new":"high"},{"seq":192322,"id":"CVE-2026-8932","ts":1789373639977,"field":"cvss","old":"7.5","new":null},{"seq":192321,"id":"CVE-2026-8932","ts":1789373639977,"field":"severity","old":"high","new":"none"},{"seq":191107,"id":"CVE-2026-8932","ts":1789369502473,"field":"cvss","old":null,"new":"7.5"},{"seq":191106,"id":"CVE-2026-8932","ts":1789369502473,"field":"severity","old":"none","new":"high"},{"seq":189894,"id":"CVE-2026-8932","ts":1789368461543,"field":"cvss","old":"7.5","new":null},{"seq":189893,"id":"CVE-2026-8932","ts":1789368461543,"field":"severity","old":"high","new":"none"},{"seq":188677,"id":"CVE-2026-8932","ts":1789365240514,"field":"cvss","old":null,"new":"7.5"},{"seq":188676,"id":"CVE-2026-8932","ts":1789365240514,"field":"severity","old":"none","new":"high"},{"seq":187464,"id":"CVE-2026-8932","ts":1789363480876,"field":"cvss","old":"7.5","new":null},{"seq":187463,"id":"CVE-2026-8932","ts":1789363480876,"field":"severity","old":"high","new":"none"},{"seq":186250,"id":"CVE-2026-8932","ts":1789361244227,"field":"cvss","old":null,"new":"7.5"},{"seq":186249,"id":"CVE-2026-8932","ts":1789361244227,"field":"severity","old":"none","new":"high"},{"seq":185037,"id":"CVE-2026-8932","ts":1789358388653,"field":"cvss","old":"7.5","new":null},{"seq":185036,"id":"CVE-2026-8932","ts":1789358388653,"field":"severity","old":"high","new":"none"},{"seq":183286,"id":"CVE-2026-8932","ts":1789354329239,"field":"cvss","old":null,"new":"7.5"},{"seq":183285,"id":"CVE-2026-8932","ts":1789354329239,"field":"severity","old":"none","new":"high"},{"seq":182079,"id":"CVE-2026-8932","ts":1789353335860,"field":"cvss","old":"7.5","new":null},{"seq":182078,"id":"CVE-2026-8932","ts":1789353335860,"field":"severity","old":"high","new":"none"},{"seq":180872,"id":"CVE-2026-8932","ts":1789350300519,"field":"cvss","old":null,"new":"7.5"},{"seq":180871,"id":"CVE-2026-8932","ts":1789350300519,"field":"severity","old":"none","new":"high"},{"seq":179665,"id":"CVE-2026-8932","ts":1789348309193,"field":"cvss","old":"7.5","new":null},{"seq":179664,"id":"CVE-2026-8932","ts":1789348309193,"field":"severity","old":"high","new":"none"},{"seq":178458,"id":"CVE-2026-8932","ts":1789346382104,"field":"cvss","old":null,"new":"7.5"},{"seq":178457,"id":"CVE-2026-8932","ts":1789346382104,"field":"severity","old":"none","new":"high"},{"seq":177251,"id":"CVE-2026-8932","ts":1789343189162,"field":"cvss","old":"7.5","new":null},{"seq":177250,"id":"CVE-2026-8932","ts":1789343189162,"field":"severity","old":"high","new":"none"},{"seq":175368,"id":"CVE-2026-8932","ts":1789334894583,"field":"cvss","old":null,"new":"7.5"},{"seq":175367,"id":"CVE-2026-8932","ts":1789334894583,"field":"severity","old":"none","new":"high"},{"seq":174163,"id":"CVE-2026-8932","ts":1789333705861,"field":"cvss","old":"7.5","new":null},{"seq":174162,"id":"CVE-2026-8932","ts":1789333705861,"field":"severity","old":"high","new":"none"},{"seq":172977,"id":"CVE-2026-8932","ts":1789331103818,"field":"cvss","old":null,"new":"7.5"},{"seq":172976,"id":"CVE-2026-8932","ts":1789331103818,"field":"severity","old":"none","new":"high"}]}