CVE-2026-8932
Qualys 위협 인텔 · 심각도 4/5 · QID 290577 · Fedora
공개 익스플로잇
측면이동
libcurl would reuse a previously created connection even when some mTLS config
related option had been changed that should have prohibited reuse.
libcurl keeps previously used connections in a connection pool for subsequent
transfers to reuse if one of them matches the setup. However, some TLS
settings related to client certificates were left out from the configuration
match checks, making them match too easily. In particular options related to
the private key.
related option had been changed that should have prohibited reuse.
libcurl keeps previously used connections in a connection pool for subsequent
transfers to reuse if one of them matches the setup. However, some TLS
settings related to client certificates were left out from the configuration
match checks, making them match too easily. In particular options related to
the private key.
타임라인
- NVD 공개
- 첫 보도 CISA Advisories · 히타치 에너지 RTU500 제품
날짜 정보 없는 신호: 공개 PoC 2건
벡터: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
공개 익스플로잇 / PoC
- GitHub 공개 PoC 2건 — 대표 레포 ↗