Feed/CVE-2026-92392
CVE-2026-92392HIGHCVSS 8.1

CVE-2026-92392

Published Oct 14, 2026·Updated Oct 18, 2026

NVD Description

During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.

Public Exploits & PoCs1 found

Community Discussion

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Register your stack and get notified within minutes when a matching CVE drops.

Start monitoring free