High severity7.5NVD Advisory· Published Sep 6, 2026· Updated Sep 15, 2026

CVE-2026-80231

Description

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting (CURLSSLOPT_NATIVE_CA) than when the connection was created.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Curl/Libcurlllm-create

Patches

Vulnerability mechanics

References

curl.se/docs/CVE-2026-80231.htmlnvdMitigationPatchVendor Advisory
hackerone.com/reports/3969368nvdExploitMitigationThird Party Advisory
curl.se/docs/CVE-2026-80231.jsonnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000