When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP, POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new target host.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade curl | May 20, 2026 | Jan 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade curl-debuginfoUpgrade libcurl-develUpgrade libcurlUpgrade curl | May 20, 2026 | May 20, 2026 |
| Apple Osx Curl | — | Upgrade macOS to the latest version | Mar 27, 2026 | Mar 24, 2026 |
| Debian | — | Upgrade curl | Jul 12, 2026 | Jul 12, 2026 |
| Freebsd | — | Upgrade curl | Mar 12, 2026 | Mar 11, 2026 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libcurlUpgrade curl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade libcurlUpgrade curl | Mar 17, 2026 | Mar 16, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade curlUpgrade libcurl | Mar 10, 2026 | Mar 10, 2026 |
| Ibm Aix | — | Apply the fix or workaround for curl_advisory9 | Apr 16, 2026 | Apr 15, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Jan 7, 2026 |
| Ubuntu | — | Upgrade libcurl3t64-gnutlsUpgrade libcurl3-gnutlsUpgrade libcurl4t64Upgrade libcurl4-nss-devUpgrade libcurl3-nssUpgrade libcurl4-gnutls-devUpgrade curlUpgrade libcurl4-openssl-devUpgrade libcurl4 | Feb 26, 2026 | Feb 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Jan 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub