PT-2026-84655
CVE-2026-80230
·
تاريخ النشر
2026-09-02
·
تاريخ التحديث
2026-10-19
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
curl (affected versions not specified)
Description
An issue exists where libcurl fails to enforce public key pinning when
CURLOPT PINNEDPUBLICKEY is used in conjunction with options that disable standard peer verification, specifically CURLOPT SSL VERIFYPEER = 0 and CURLOPT SSL VERIFYHOST = 0. This allows unauthenticated connections to succeed without a presented server certificate, bypassing the pinning check.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾