CVE-2026-92392None▾ SunlitDuring an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
During an upload, curl mishandles HTTP/2 RST_STREAM received from the server
(with reason HTTP_1_1_REQUIRED or REFUSED_STREAM) leading to a use after
free of a struct Curl_easy object.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.