All vulnerabilities

Servers and applications

CVE-2026-87862

HSTS cache import drops longer-lived child

Severity
Unrated
Published
20 Oct 2026
Last changed
20 Oct 2026
Added to UpHeron
20 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
curlServers and applications · cna:curl|curl
  • From 8.22.0 up to 8.22.0
  • From 8.21.0 up to 8.21.0
  • From 8.20.0 up to 8.20.0
  • From 8.19.0 up to 8.19.0
All 15 release lines
  • From 8.11.0 up to 8.11.0
  • From 8.11.1 up to 8.11.1
  • From 8.12.0 up to 8.12.0
  • From 8.12.1 up to 8.12.1
  • From 8.13.0 up to 8.13.0
  • From 8.14.0 up to 8.14.0
  • From 8.14.1 up to 8.14.1
  • From 8.15.0 up to 8.15.0
  • From 8.16.0 up to 8.16.0
  • From 8.17.0 up to 8.17.0
  • From 8.18.0 up to 8.18.0
  • From 8.19.0 up to 8.19.0
  • From 8.20.0 up to 8.20.0
  • From 8.21.0 up to 8.21.0
  • From 8.22.0 up to 8.22.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-87862