Tag: cve 2026 92392

Curl Fixes Flaw That Exposes Clients to Code Execution

A subtle bug in curl's HTTP/2 upload sequence could let malicious servers corrupt memory on machines running the curl client and libcurl library, potentially leading to code execution - but thankfully, a fix was swiftly rolled out in curl 8.23.0 on October 14. The vulnerability, tracked as CVE-2026-92392, affects curl releases 8.12.0 through 8.22.0.