Report feedback

When sending SMB requests, an authenticated local attacker can access memory after it has been freed, and thereby carry out a DoS attack or potentially obtain sensitive information [1].

The vulnerability is present in product:

• cURL; >=8.13.0, <8.19.0;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

More information:

• CVE-2026-3805 at cve.org, NVD
• CWE-416: Use After Free at cwe.mitre.org

The vulnerability was publicly disclosed 11. 3. 2026.

When the HTTP Negotiate mechanism is used, an authenticated remote attacker can send HTTP(S) requests on behalf of another authenticated user [2].

The vulnerability is present in product:

• cURL; >=7.10.6, <8.19.0;

CVSS: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

More information:

• CVE-2026-1965 at cve.org, NVD
• CWE-305: Authentication Bypass by Primary Weakness at cwe.mitre.org

The vulnerability was publicly disclosed 11. 3. 2026.

Under certain circumstances, when sending HTTP(S) requests containing a redirect, an unauthenticated remote attacker can obtain an OAuth2 Bearer token originally intended for the server performing the redirect. Exploiting the vulnerability requires the attacker to control the server to which the redirect points [3].

The vulnerability is present in product:

• cURL; >=7.33.0, <8.19.0;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

More information:

• CVE-2026-3783 at cve.org, NVD
• CWE-522: Insufficiently Protected Credentials at cwe.mitre.org

The vulnerability was publicly disclosed 11. 3. 2026.

An authenticated remote attacker can use the HTTP proxy connections of another authenticated user [4].

The vulnerability is present in product:

• cURL; >=8.13.0, <8.19.0;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

More information:

• CVE-2026-3784 at cve.org, NVD
• CWE-305: Authentication Bypass by Primary Weakness at cwe.mitre.org

The vulnerability was publicly disclosed 11. 3. 2026.