CVE-2026-82208

Name of the Vulnerable Software and Affected Versions libcurl (affected versions not specified)

Description When using the wolfSSL backend with CA caching enabled, a flaw exists where the CURLOPT SSL CTX FUNCTION callback can be overridden. If this callback replaces the trust store, libcurl may silently reinstall the cached store after the callback returns. This results in a scenario where a certificate trusted by the cached store is incorrectly accepted, even if it was rejected by the store selected via the callback.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.