curl curl

Name: curl curl
Brand: curl

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high10medium2low

updated 2026-10-27

vulnerabilities (65)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-38545US	critical9.8	78.7% (100th)	Exploit	8.4.0	2023-10-18	8.4.0 → 8.4.0
CVE-2023-38039US	high7.5	56.4% (99th)	Exploit	8.3.0	2023-09-15	8.3.0 → 8.3.0
CVE-2026-3805US	—	0.82% (57th)	Exploit	no fix	2026-03-11	7 versions
CVE-2026-8932US	—	0.40% (34th)	Exploit	no fix	2026-07-03	193 versions
CVE-2025-5025US	—	0.31% (23rd)	Exploit	no fix	2025-05-28	14 versions
CVE-2019-5436US	high7.8	49.7% (99th)	—	no fix	2019-05-28	≤ Fixed in 7.65.0
CVE-2024-2398US	—	36.1% (98th)	—	no fix	2024-03-27	78 versions
CVE-2024-7264US	medium6.5	20.2% (97th)	—	no fix	2024-07-31	95 versions
CVE-2023-38546US	low3.7	5.96% (93rd)	—	8.4.0	2023-10-18	8.4.0 → 8.4.0
CVE-2019-5435US	low3.7	5.66% (93rd)	—	no fix	2019-05-28	≤ Fixed in 7.65.0
CVE-2024-6197US	high7.5	4.30% (91st)	—	no fix	2024-07-24	4 versions
CVE-2024-9681US	medium6.5	1.99% (81st)	—	no fix	2024-11-06	37 versions
CVE-2024-11053US	—	1.97% (80th)	—	no fix	2024-12-11	197 versions
CVE-2024-2379US	—	1.86% (79th)	—	no fix	2024-03-27	2 versions
CVE-2025-0725US	—	1.80% (78th)	—	no fix	2025-02-05	162 versions
CVE-2023-46218US	medium6.5	1.69% (77th)	—	no fix	2023-12-07	≤ 8.4.0 ≤8.4.0
CVE-2024-2004US	—OT elevated	1.68% (77th)	—	no fix	2024-03-27	17 versions
CVE-2025-9086US	—	1.46% (73rd)	—	no fix	2025-09-12	4 versions
CVE-2024-2466US	—	1.45% (73rd)	—	no fix	2024-03-27	3 versions
CVE-2025-5399US	—	1.38% (72nd)	—	no fix	2025-06-07	2 versions
CVE-2025-0665US	—	1.33% (71st)	—	no fix	2025-02-05	≤ 8.11.1 ≤8.11.1
CVE-2017-2629US	medium6.5	1.23% (69th)	—	no fix	2018-07-27	≤ 7.53.0
CVE-2023-46219US	medium5.3OT elevated	1.13% (66th)	—	no fix	2023-12-12	≤ 8.4.0 ≤8.4.0
CVE-2024-0853US	medium5.3	1.10% (66th)	—	no fix	2024-02-03	2 versions
CVE-2026-8925US	—	1.08% (65th)	—	no fix	2026-07-03	6 versions
CVE-2026-9079US	—	1.06% (65th)	—	no fix	2026-07-03	18 versions
CVE-2026-11352US	—	1.01% (63rd)	—	no fix	2026-07-03	3 versions
CVE-2026-11586US	—	0.86% (58th)	—	no fix	2026-07-03	5 versions
CVE-2024-8096US	—	0.82% (57th)	—	no fix	2024-09-11	86 versions
CVE-2024-6874US	medium4.3	0.79% (56th)	—	no fix	2024-07-24	≤ 8.8.0 ≤8.8.0
CVE-2025-14819US	—	0.76% (55th)	—	no fix	2026-01-08	31 versions
CVE-2025-0167US	—	0.75% (55th)	—	no fix	2025-02-05	37 versions
CVE-2026-6253US	—	0.72% (54th)	—	no fix	2026-05-13	157 versions
CVE-2026-11856US	—OT elevated	0.69% (53rd)	—	no fix	2026-07-03	172 versions
CVE-2025-14524US	—	0.68% (52nd)	—	no fix	2026-01-08	107 versions
CVE-2026-8924US	—	0.66% (51st)	—	no fix	2026-07-03	95 versions
CVE-2026-9546US	—	0.65% (51st)	—	no fix	2026-07-03	3 versions
CVE-2026-5773US	high7.5	0.62% (49th)	—	no fix	2026-05-13	101 versions
CVE-2026-11564US	—	0.61% (49th)	—	no fix	2026-07-03	4 versions
CVE-2026-10536US	—	0.60% (48th)	—	no fix	2026-07-03	33 versions
CVE-2025-15079US	—	0.55% (46th)	—	no fix	2026-01-08	70 versions
CVE-2025-10148US	—	0.52% (44th)	—	no fix	2025-09-12	8 versions
CVE-2026-6429US	—	0.52% (44th)	—	no fix	2026-05-13	158 versions
CVE-2026-8927US	—OT elevated	0.50% (43rd)	—	no fix	2026-07-03	166 versions
CVE-2026-9080US	—	0.49% (42nd)	—	no fix	2026-07-03	9 versions
CVE-2025-15224US	—	0.48% (41st)	—	no fix	2026-01-08	70 versions
CVE-2026-7168US	medium5.3OT elevated	0.47% (41st)	—	no fix	2026-05-13	165 versions
CVE-2026-3783US	—	0.46% (40th)	—	no fix	2026-03-11	108 versions
CVE-2026-8926US	—	0.44% (38th)	—	no fix	2026-07-03	12 versions
CVE-2025-10966US	—	0.43% (37th)	—	no fix	2025-11-07	53 versions

showing 50 of 65

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-295Improper Certificate Validation14 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-297Improper Validation of Certificate with Host Mismatch5 CVEs
CWE-522Insufficiently Protected Credentials5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-305Authentication Bypass by Primary Weakness4 CVEs
CWE-125Out-of-bounds Read3 CVEs
CWE-201Insertion of Sensitive Information Into Sent Data3 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)65 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan