Rat5ak/CVE-2026-3805-curl-SMB-UAF

PoC

CVE-2026-3805: Use-After-Free in curl SMB connection reuse - heap info disclosure

view exploit source poc_in_githubauthor Rat5akpublished 2026-04-12catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-3805US—Exploit
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan