All vulnerabilities

Servers and applications

CVE-2026-5773

libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When reusing a connection a range of criteria must be met. Due to a logical error in the code, a network transfer operation that was requested by an application could wrongfully reuse an…

Severity
High 7.5
Published
13 May 2026
Last changed
15 Sept 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.20.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.40.0 before 8.20.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2026-5773
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-5773