All vulnerabilities

Servers and applications

CVE-2026-92392

HTTP/2 upload Use-After-Free

Severity
High 8.1
Published
14 Oct 2026
Last changed
15 Oct 2026
Added to UpHeron
14 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
curlServers and applications · cna:curl|curl
  • From 8.22.0 up to 8.22.0
  • From 8.21.0 up to 8.21.0
  • From 8.20.0 up to 8.20.0
  • From 8.19.0 up to 8.19.0
All 13 release lines
  • From 8.12.0 up to 8.12.0
  • From 8.12.1 up to 8.12.1
  • From 8.13.0 up to 8.13.0
  • From 8.14.0 up to 8.14.0
  • From 8.14.1 up to 8.14.1
  • From 8.15.0 up to 8.15.0
  • From 8.16.0 up to 8.16.0
  • From 8.17.0 up to 8.17.0
  • From 8.18.0 up to 8.18.0
  • From 8.19.0 up to 8.19.0
  • From 8.20.0 up to 8.20.0
  • From 8.21.0 up to 8.21.0
  • From 8.22.0 up to 8.22.0

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-92392