News Vulnerabilities & Zero-Days
curl 8.23.0 fixes High-severity HTTP/2 use-after-free CVE-2026-92392
curl 8.23.0, released on 14 October 2026, fixes CVE-2026-92392, a use-after-free in HTTP/2 uploads that affects curl and libcurl 8.12.0 through 8.22.0. A malicious server can trigger it, and the advisory shows it can be turned into code execution under narrow conditions.
Jaydeep Bhatt