CVE-2026-92386None▾ SunlitWhen writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same coo…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
When writing a long cookie name and value to a Netscape cookie jar, a remote
HTTP server can make curl write a record that exceeds its line-length
parsing limit. Consequently, any subsequent curl invocation reading from
that same cookie jar using --cookie silently aborts parsing prematurely upon
encountering the too long line, ignoring all subsequent valid cookies in the
file.
curl >= 8.22.0 <= 8.22.0curl >= 8.21.0 <= 8.21.0curl >= 8.20.0 <= 8.20.0curl >= 8.19.0 <= 8.19.0curl >= 8.18.0 <= 8.18.0curl >= 8.17.0 <= 8.17.0curl >= 8.16.0 <= 8.16.0curl >= 8.15.0 <= 8.15.0curl >= 8.14.1 <= 8.14.1curl >= 8.14.0 <= 8.14.0curl >= 8.13.0 <= 8.13.0curl >= 8.12.1 <= 8.12.1curl >= 8.12.0 <= 8.12.0curl >= 8.11.1 <= 8.11.1curl >= 8.11.0 <= 8.11.0curl >= 8.10.1 <= 8.10.1curl >= 8.10.0 <= 8.10.0curl >= 8.9.1 <= 8.9.1curl >= 8.9.0 <= 8.9.0curl >= 8.8.0 <= 8.8.0curl >= 8.7.1 <= 8.7.1curl >= 8.7.0 <= 8.7.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-87861Nonecross-origin reuse of a Negotiate connection
CVE-2026-86415Noneauto client cert connection reuse mixup
CVE-2026-86414Noneleaking host credentials to HTTP proxy
CVE-2026-87864NoneIMAP APPEND plus CRLF conversion command injection
CVE-2026-87863NoneHSTS response erases persisted entries
CVE-2026-87862NoneHSTS cache import drops longer-lived child