CVE-2026-80231

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description A flaw in libcurl causes the software to incorrectly reuse an existing HTTPS connection setup for a specific hostname, even if a different Native CA Store setting (CURLSSLOPT NATIVE CA) is used compared to when the connection was originally established. The Native CA Store is a mechanism that allows curl to use the operating system's built-in certificate store to verify the authenticity of SSL/TLS certificates.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.