Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-82208

With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can silently reinstall the cached store after the callback returns. A certificate trusted by the cached store but rejected by the callback-selected store is then incorrectly accepted.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 35.9%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2026-82208
  • Haxx » Curl » Version: 8.10.0
    cpe:2.3:a:haxx:curl:8.10.0
  • Haxx » Curl » Version: 8.10.1
    cpe:2.3:a:haxx:curl:8.10.1
  • Haxx » Curl » Version: 8.11.0
    cpe:2.3:a:haxx:curl:8.11.0
  • Haxx » Curl » Version: 8.11.1
    cpe:2.3:a:haxx:curl:8.11.1
  • Haxx » Curl » Version: 8.12.0
    cpe:2.3:a:haxx:curl:8.12.0
  • Haxx » Curl » Version: 8.12.1
    cpe:2.3:a:haxx:curl:8.12.1
  • Haxx » Curl » Version: 8.13.0
    cpe:2.3:a:haxx:curl:8.13.0
  • Haxx » Curl » Version: 8.14.0
    cpe:2.3:a:haxx:curl:8.14.0
  • Haxx » Curl » Version: 8.14.1
    cpe:2.3:a:haxx:curl:8.14.1
  • Haxx » Curl » Version: 8.15.0
    cpe:2.3:a:haxx:curl:8.15.0
  • Haxx » Curl » Version: 8.16.0
    cpe:2.3:a:haxx:curl:8.16.0
  • Haxx » Curl » Version: 8.17.0
    cpe:2.3:a:haxx:curl:8.17.0
  • Haxx » Curl » Version: 8.18.0
    cpe:2.3:a:haxx:curl:8.18.0
  • Haxx » Curl » Version: 8.19.0
    cpe:2.3:a:haxx:curl:8.19.0
  • Haxx » Curl » Version: 8.20.0
    cpe:2.3:a:haxx:curl:8.20.0
  • Haxx » Curl » Version: 8.21.0
    cpe:2.3:a:haxx:curl:8.21.0
  • Haxx » Curl » Version: 8.9.1
    cpe:2.3:a:haxx:curl:8.9.1


Products
Pricing
Contact Us

Shodan ® - All rights reserved