Skip to main content
CVE-2026-5545VulnerabilityPublished Updated

Red Hat Security Advisory: curl security update

Affects Red Hat curlSource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 30 Oct 2026, 11:52 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS
0.4% chance of exploitation in 30 days – higher than 35% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 12 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

AI-suggested

Red Hat has issued an official security update for curl in Red Hat Enterprise Linux 10 that addresses these vulnerabilities. Users should apply the update as described in the Red Hat advisory (RHSA-2026:80512) and the referenced article https://access.redhat.com/articles/11258 to remediate these issues. No additional mitigation steps are indicated beyond applying the official patch.

Description

Multiple security vulnerabilities have been identified and fixed in the curl packages provided by Red Hat Enterprise Linux 10. These include proxy credential disclosure, authentication bypass, credential leaks via reused proxy connections during HTTP redirects, information disclosure due to incorrect Proxy-Authorization header reuse, and a use-after-free vulnerability leading to denial of service. The update addresses these issues to improve the security of libcurl and the curl utility.

References

Community reviews

Loading reviews…