Search: CVE-2026-80230

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	7.5	EPSS 0.4%	CVE-2026-80230curl · When CURLOPT_PINNEDPUBLICKEY is configured alongside options that disable standard peer verification (CURLOPT_SSL_VERIFYPEER = 0 and Medium7.5EPSS 0.4%2026-09-06GCVE DatabaseCVE-2026-80230 CVE-2026-80230 is a vulnerability in libcurl where public key pinning (CURLOPT_PINNEDPUBLICKEY) is not enforced if standard peer verification options (CURLOPT_SSL_VERIFYPEER and CURLOPT_SSL_VERIFYHOST) are disabled. This allows unauthenticated connections to succeed when they should be rejected. The issue affects specific Ubuntu package versions of curl. A fix is available through system updates. EPSS 0.4%Vulnerability	GCVE Database	2026-09-06

Page 1 of 1