UBUNTU-CVE-2026-80255

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2026-80255
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80255.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-80255
Upstream
Published
2026-09-06T18:17:00Z
Modified
2026-09-16T11:41:47Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

A Set-Cookie: header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the Secure attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host.

References

Affected packages

Ubuntu:26.04:LTS / curl

Package

Name
curl
Purl
pkg:deb/ubuntu/curl?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

8.*
8.14.1-2ubuntu1
8.17.0-1ubuntu1
8.18.0-1ubuntu1
8.18.0-1ubuntu2
8.18.0-1ubuntu2.1
8.18.0-1ubuntu2.2
8.18.0-1ubuntu2.3
8.18.0-1ubuntu2.4
8.18.0-1ubuntu2.5

Ecosystem specific 

{
    "binaries":  [
        {
            "binary_name":  "curl",
            "binary_version":  "8.18.0-1ubuntu2.5"
        },
        {
            "binary_name":  "libcurl3t64-gnutls",
            "binary_version":  "8.18.0-1ubuntu2.5"
        },
        {
            "binary_name":  "libcurl4t64",
            "binary_version":  "8.18.0-1ubuntu2.5"
        }
    ]
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-80255.json"