Mmastodon TechnologyCybersecurity first seen 4 d ago, last 4 d ago, peak #3

curl vulnerability lets cached authenticated connections be reused

Original: 🚨 EUVD-2026-105307 📊 Score: n/a 📦 Product: curl, curl 🏢 Vendor: curl 📅 Updated: 2026-10-20 📝 libcurl's connection cache

A new vulnerability, EUVD-2026-105307, has been published affecting curl's libcurl library. The flaw sits in libcurl's connection cache match function, which never considers the automatic client certificate option. As a result, a cached, already authenticated Schannel connection could be handed to a transfer intended for a different context, potentially sending requests with the wrong credentials. The entry was updated on 20 October 2026; no severity score is listed yet.

Why now: curl is widely used across countless applications, so flaws in its connection handling prompt immediate attention from developers and security teams.

curllibcurlEUVD-2026-105307

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 4 d ago to 4 d ago.

Evidence

• 🚨 EUVD-2026-105307 📊 Score: n/a 📦 Product: curl, curl 🏢 Vendor: curl 📅 Updated: 2026-10-20 📝 libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3037667