CVE-2026-92387

Published: Ott 20, 2026 Last Modified: Ott 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

By permanently omitting the final control-response line, a malicious FTP,
IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its
configured transfer timeout mechanism, indefinitely blocking all concurrent
transfers bound to the same multi-handle.

https://curl.se/docs/CVE-2026-92387.html
https://curl.se/docs/CVE-2026-92387.html
https://curl.se/docs/CVE-2026-92387.json
https://curl.se/docs/CVE-2026-92387.json
https://hackerone.com/reports/4022003
https://hackerone.com/reports/4022003