A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.
High CVSS 8.1
Summary
A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.
In-depth triage
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Sources
- NVD DATABASE
Original Links
- https://curl.se/docs/CVE-2026-8286.html Patch
- https://curl.se/docs/CVE-2026-8286.json Vendor Advisory
- https://hackerone.com/reports/3718195 Exploit
- https://hackerone.com/reports/3718195 Exploit
Timeline
- nvd_ingest NVD