AZL-86658
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-86658.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-86658
- Upstream
- Published
- 2026-05-13T13:01:55Z
- Modified
- 2026-08-30T05:26:50Z
- Summary
- CVE-2026-4873 affecting package curl for versions less than 8.11.1-7
- Details
-
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
- References