Search: CVE-2026-5773

A logical error in libcurl's connection reuse logic for SMB(S) transfers can cause the reuse of an existing SMB connection to the same server but with a different share than intended. This may lead to downloading the wrong file or uploading a file to an incorrect location while using the same credentials and server name. The issue affects multiple Ubuntu package versions of curl and has a CVSS score of 7.5. Official patches are available from Ubuntu to address this vulnerability.