THREATOPS
THREAT OPSThreat News › [NVD] CVE-2026-8932 (HIGH 7.5) — libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. Ho

[NVD] CVE-2026-8932 (HIGH 7.5) — libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse. libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. Ho

lownvdPublished 2026-07-03

CVE-2026-8932 CVSS: 7.5 HIGH Published: 2026-07-03T07:16:25.363

libcurl would reuse a previously created connection even when some mTLS config related option had been changed that should have prohibited reuse.

libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However, some TLS settings related to client certificates

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8932