Skip to main content
CVE-2026-8458VulnerabilityPublished

Red Hat Security Advisory: curl security, bug fix, and enhancement update

Affects Red Hat curl security,Source GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 29 Oct 2026, 16:08 UTC

Severity
High

Rated by Threat Radar · CVSS not yet scored by NVD

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 29 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

AI-suggested

Red Hat has released an update for curl packages in Red Hat Enterprise Linux 8 that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory RHSA-2026:92368 to remediate these issues. Detailed instructions for applying the update are available at https://access.redhat.com/articles/11258. Since this is an official fix, applying the update is the recommended mitigation.

Description

Multiple security vulnerabilities have been identified and fixed in the curl packages provided by Red Hat Enterprise Linux 8. These include security feature bypasses, unauthorized connection reuse, cookie injection, and information disclosure issues related to mTLS connection reuse, logical errors, malicious HTTP servers, Digest authentication header reuse, and proxy authentication state. The update also includes bug fixes and enhancements such as increasing the default number of HTTP/2 streams. The vulnerabilities are rated as important by Red Hat Product Security.

References

Community reviews

Loading reviews…