This vulnerability, identified as CVE-2026-19931, affects various Ubuntu-packaged versions of curl. It has a CVSS 3.1 base score of 9.8, reflecting a critical severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts to confidentiality, integrity, and availability. The lack of a detailed description or technical details limits further analysis. The vulnerability affects many Ubuntu-specific curl package versions across multiple LTS releases from 14.04 through 26.04. No vendor advisory or patch information is provided, and no known exploits have been reported.

The vulnerability has a critical CVSS score of 9.8, indicating that successful exploitation could lead to complete compromise of confidentiality, integrity, and availability of affected systems. The network attack vector and no required privileges or user interaction suggest high exploitability. However, the absence of detailed technical information and known exploits limits precise impact assessment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users of affected Ubuntu curl packages should monitor official Ubuntu security advisories and apply updates promptly once available.