Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Eunsoo Kim

#18090of 60,391
17.3Total CVSS
Vulnerabilities · 2
High
1
Critical
1
PT-2026-84650
2026-09-02
9.8
CVE-2026-13608
Libcurl
Libcurl
A flaw in the SASL negotiation for LDAP authentication allows an incomplete handshake sequence to be misinterpreted as a successful cryptographic verification. An attacker performing a Man-in-the-Middle (MITM) attack—where the attacker secretly relays and possibly alters the communication between two parties—can inject a premature or shortcut response to bypass complete peer validation.
PT-2026-51754
2026-06-24
7.5
CVE-2026-9545
Curl
Libcurl
An issue exists where libcurl may send request data on a new connection before enforcing certificate verification failure. This occurs when a user first connects to a legitimate HTTP/3 server and subsequently connects to an attacker's impostor machine lacking a valid certificate. The leak of sensitive information can happen if a cached SSL session is used (where `CURLOPT SSL SESSIONID CACHE` is enabled) and early data is active (where the `CURLSSLOPT EARLYDATA` bit is set in `CURLOPT SSL OPTIONS`).