When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl, changing TLS options in one thread would inadvertently change them globally and therefore possibly also affect other concurrently setup transfers.
Disabling certificate verification for a specific transfer could unintentionally disable the feature for other threads as well.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | May 20, 2026 | Jan 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade curlUpgrade libcurl-develUpgrade libcurlUpgrade curl-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade curlUpgrade libcurl-minimal-debuginfoUpgrade curl-debugsourceUpgrade libcurl-minimalUpgrade curl-debuginfoUpgrade libcurlUpgrade libcurl-debuginfoUpgrade curl-minimal-debuginfoUpgrade libcurl-develUpgrade curl-minimal | Feb 20, 2026 | Jan 8, 2026 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Sep 16, 2026 | Sep 14, 2026 |
| Freebsd | — | Upgrade mysql84-clientUpgrade mysql96-clientUpgrade mysql80-serverUpgrade mysql80-clientUpgrade mysql96-serverUpgrade curlUpgrade mysql84-server | May 19, 2026 | May 19, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libcurlUpgrade curl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade curlUpgrade libcurl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade libcurlUpgrade curl | Mar 10, 2026 | Mar 10, 2026 |
| Oracle Mysql | — | Upgrade to MySQL version 8.4.9Upgrade to MySQL version 9.7.0Upgrade to MySQL version 8.0.46 | Apr 22, 2026 | Jan 8, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 8, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.2.6 | Aug 20, 2026 | Jan 8, 2026 |
| Ubuntu | — | Upgrade libcurl3t64-gnutlsUpgrade curlUpgrade libcurl4 (Ubuntu Pro)Upgrade libcurl4Upgrade libcurl4-openssl-devUpgrade libcurl3-nssUpgrade libcurl4-nss-devUpgrade libcurl3-gnutlsUpgrade libcurl4-gnutls-devUpgrade curl (Ubuntu Pro)Upgrade libcurl3 (Ubuntu Pro)Upgrade libcurl4t64 | Feb 26, 2026 | Feb 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub