CVE-2026-11564

Name of the Vulnerable Software and Affected Versions libcurl (affected versions not specified)

Description An issue exists in the certificate authentication procedure where the library maintains a connection pool for reusing connections in subsequent transfers. If a handle initially uses the default native CA trust and is later switched to custom CA material, it may continue to trust the native platform store for subsequent transfers using that handle. This could allow a remote attacker to perform data spoofing or gain unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.