--- title: CVEs description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/cves --- # Search CVE reports CVE ID or description contains: Search --- [Toggle filters](https://ubuntu.com/security/cves#drawer) 1 – 10 of 82516 results Detailed view Sort by: Date Newest Oldest --- ## [CVE-2026-94266](https://ubuntu.com/security/CVE-2026-94266) Low priority Some fixes available 1 of 4 libcurl could accidentally return a URL for curl\_easy\_getinfo's `CURLINFO\_EFFECTIVE\_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did. The curl tool exposes the same... 1 affected package curl --- ## [CVE-2026-94265](https://ubuntu.com/security/CVE-2026-94265) Low priority Not affected When processing an HTTP redirect to a URL containing userinfo (a `username:password` component), curl might erroneously retain and re-transmit the original host's HTTP Negotiate authentication state. Consequently, a malicious... 1 affected package curl --- ## [CVE-2026-92392](https://ubuntu.com/security/CVE-2026-92392) High priority Fixed During an upload, curl mishandles HTTP/2 `RST\_STREAM` received from the server (with reason `HTTP\_1\_1\_REQUIRED` or `REFUSED\_STREAM`) leading to a use after free of a `struct Curl\_easy` object. 1 affected package curl --- ## [CVE-2026-92391](https://ubuntu.com/security/CVE-2026-92391) Low priority Some fixes available 1 of 5 A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within `curl\_mime\_free` leads to unbounded stack frame... 1 affected package curl --- ## [CVE-2026-92390](https://ubuntu.com/security/CVE-2026-92390) Low priority Some fixes available 1 of 5 When invoked with `--remote-header-name` (`-J`), curl fails to preserve its documented anti-clobbering protection if an intermediate 103 Early Hints response precedes the final HTTP response, or if an `ETag` header is processed... 1 affected package curl --- ## [CVE-2026-92389](https://ubuntu.com/security/CVE-2026-92389) Low priority Some fixes available 1 of 7 libcurl's TFTP state machine fails to validate state transitions against the requested transfer direction, accepting opening server responses for both reads and writes interchangeably. A malicious TFTP server can respond to a... 1 affected package curl --- ## [CVE-2026-92388](https://ubuntu.com/security/CVE-2026-92388) Low priority Some fixes available 1 of 7 When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy... 1 affected package curl --- ## [CVE-2026-92387](https://ubuntu.com/security/CVE-2026-92387) Low priority Fixed By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent... 1 affected package curl --- ## [CVE-2026-92386](https://ubuntu.com/security/CVE-2026-92386) Low priority Fixed When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that... 1 affected package curl --- ## [CVE-2026-87866](https://ubuntu.com/security/CVE-2026-87866) Low priority Not affected When built with wolfSSL, curl can successfully validate a pinned public key hash against a key the TLS peer does not possess. During the TLS handshake, wolfSSL validates the connection, but curl's subsequent re-parsing of the same... 1 affected package curl 1. *Previous page* 2. [1](https://ubuntu.com/security/cves?format=md&offset=0) 3. [2](https://ubuntu.com/security/cves?format=md&offset=10) 4. [3](https://ubuntu.com/security/cves?format=md&offset=20) 5. [4](https://ubuntu.com/security/cves?format=md&offset=30) 6. [5](https://ubuntu.com/security/cves?format=md&offset=40) 7. [*Next page*](https://ubuntu.com/security/cves?format=md&offset=10 "Next page") [Export to JSON](https://ubuntu.com/security/cves) Results by page: 10 20