CVE-2026-4873

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description A flaw exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is performed in clear-text via IMAP, SMTP, or POP3, a subsequent request to the same host bypasses the TLS requirement and transmits data unencrypted.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.