Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-13608

A flaw in the libcurl SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker executing a Man-in-the-Middle (MITM) attack can inject a premature or shortcut response that bypasses complete peer validation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 48.9%
CVSS Severity
CVSS v3 Score 7.4
Products affected by CVE-2026-13608
  • Haxx » Curl » Version: 7.82.0
    cpe:2.3:a:haxx:curl:7.82.0
  • Haxx » Curl » Version: 7.83.0
    cpe:2.3:a:haxx:curl:7.83.0
  • Haxx » Curl » Version: 7.83.1
    cpe:2.3:a:haxx:curl:7.83.1
  • Haxx » Curl » Version: 7.84.0
    cpe:2.3:a:haxx:curl:7.84.0
  • Haxx » Curl » Version: 7.85.0
    cpe:2.3:a:haxx:curl:7.85.0
  • Haxx » Curl » Version: 7.86.0
    cpe:2.3:a:haxx:curl:7.86.0
  • Haxx » Curl » Version: 7.87.0
    cpe:2.3:a:haxx:curl:7.87.0
  • Haxx » Curl » Version: 7.88.0
    cpe:2.3:a:haxx:curl:7.88.0
  • Haxx » Curl » Version: 7.88.1
    cpe:2.3:a:haxx:curl:7.88.1
  • Haxx » Curl » Version: 8.0.0
    cpe:2.3:a:haxx:curl:8.0.0
  • Haxx » Curl » Version: 8.0.1
    cpe:2.3:a:haxx:curl:8.0.1
  • Haxx » Curl » Version: 8.1.0
    cpe:2.3:a:haxx:curl:8.1.0
  • Haxx » Curl » Version: 8.1.1
    cpe:2.3:a:haxx:curl:8.1.1
  • Haxx » Curl » Version: 8.1.2
    cpe:2.3:a:haxx:curl:8.1.2
  • Haxx » Curl » Version: 8.10.0
    cpe:2.3:a:haxx:curl:8.10.0
  • Haxx » Curl » Version: 8.10.1
    cpe:2.3:a:haxx:curl:8.10.1
  • Haxx » Curl » Version: 8.11.0
    cpe:2.3:a:haxx:curl:8.11.0
  • Haxx » Curl » Version: 8.11.1
    cpe:2.3:a:haxx:curl:8.11.1
  • Haxx » Curl » Version: 8.12.0
    cpe:2.3:a:haxx:curl:8.12.0
  • Haxx » Curl » Version: 8.12.1
    cpe:2.3:a:haxx:curl:8.12.1
  • Haxx » Curl » Version: 8.13.0
    cpe:2.3:a:haxx:curl:8.13.0
  • Haxx » Curl » Version: 8.14.0
    cpe:2.3:a:haxx:curl:8.14.0
  • Haxx » Curl » Version: 8.14.1
    cpe:2.3:a:haxx:curl:8.14.1
  • Haxx » Curl » Version: 8.15.0
    cpe:2.3:a:haxx:curl:8.15.0
  • Haxx » Curl » Version: 8.16.0
    cpe:2.3:a:haxx:curl:8.16.0
  • Haxx » Curl » Version: 8.17.0
    cpe:2.3:a:haxx:curl:8.17.0
  • Haxx » Curl » Version: 8.18.0
    cpe:2.3:a:haxx:curl:8.18.0
  • Haxx » Curl » Version: 8.19.0
    cpe:2.3:a:haxx:curl:8.19.0
  • Haxx » Curl » Version: 8.2.0
    cpe:2.3:a:haxx:curl:8.2.0
  • Haxx » Curl » Version: 8.2.1
    cpe:2.3:a:haxx:curl:8.2.1
  • Haxx » Curl » Version: 8.20.0
    cpe:2.3:a:haxx:curl:8.20.0
  • Haxx » Curl » Version: 8.21.0
    cpe:2.3:a:haxx:curl:8.21.0
  • Haxx » Curl » Version: 8.4.0
    cpe:2.3:a:haxx:curl:8.4.0
  • Haxx » Curl » Version: 8.5.0
    cpe:2.3:a:haxx:curl:8.5.0
  • Haxx » Curl » Version: 8.6.0
    cpe:2.3:a:haxx:curl:8.6.0
  • Haxx » Curl » Version: 8.7.0
    cpe:2.3:a:haxx:curl:8.7.0
  • Haxx » Curl » Version: 8.7.1
    cpe:2.3:a:haxx:curl:8.7.1
  • Haxx » Curl » Version: 8.8.0
    cpe:2.3:a:haxx:curl:8.8.0
  • Haxx » Curl » Version: 8.9.0
    cpe:2.3:a:haxx:curl:8.9.0
  • Haxx » Curl » Version: 8.9.1
    cpe:2.3:a:haxx:curl:8.9.1


Contact Us

Shodan ® - All rights reserved