CVE-2026-92386

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description A remote HTTP server can cause curl to write a record to a Netscape cookie jar that exceeds the line-length parsing limit by providing a long cookie name and value. When a subsequent curl invocation attempts to read from this cookie jar using the --cookie flag, the parsing process silently aborts upon encountering the oversized line, causing all following valid cookies in the file to be ignored.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.