CVE-2026-107928Medium· 4.8▾ SunlitA flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expos…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 26.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.3%
Last analysed / modified upstream
— → 4.8
none → medium
0.3% → 0.7%
A flaw was found in curl. When curl is built with the GnuTLS library, a blocked transmission during communication with a malicious WebSocket server can trigger an out-of-bounds memory read. A malicious server can exploit this flaw to expose sensitive data from neighboring memory buffers or crash the client, leading to information disclosure or a Denial of Service (DoS).
curl: curl: info leak uploading over WebSockets with GnuTLS — rated Low by Red Hat. Released 2026-10-14, updated 2026-10-23.
Fixed:
Not affected:
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ https://access.redhat.com/errata/RHSA-2026:82895
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-107929Low· 3.7curl: curl: local interface connection reuse mixup (CVE-2026-107929)
CVE-2026-115754Medium· 4.7serialize-javascript: serialize-javascript: Cross-site scripting via unescaped function serialization (CVE-2026-115754)
CVE-2026-105923Medium· 5.5qt6: qt6: Denial of Service via crafted SVG in VectorImage (CVE-2026-105923)
CVE-2026-101720Medium· 5.3mysql: mysql: unauthorized data modification via connection handling (CVE-2026-101720)
CVE-2026-111756High· 7.5follow-redirects: follow-redirects: Information disclosure via array-formatted headers during cross-origin redirects (CVE-2026-111756)
CVE-2026-74048Low· 3.7tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure (CVE-2026-74048)