{"metadata": {"vulnerability": "CVE-2026-92392", "count": 63, "kinds": {"milestone": 7, "sighting": 21, "kev": 0, "other": 35}}, "data": [{"timestamp": "2025-09-12T05:10:03.815Z", "date_only": false, "value": "2025-09-12T05:10:03.815000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-09-12T06:01:02.244Z", "date_only": false, "value": "2025-09-12T06:01:02.244669+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2025-12-31T03:46:56.325Z", "date_only": false, "value": "2025-12-31T03:46:56.325000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2026-01-07T00:00:00Z", "date_only": false, "value": "2026-01-07T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2026-01-08T10:07:05.554Z", "date_only": false, "value": "2026-01-08T10:07:05.554000+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.1.release_date"}, {"timestamp": "2026-01-08T11:01:16.184Z", "date_only": false, "value": "2026-01-08T11:01:16.184214+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.1.discovery_date"}, {"timestamp": "2026-09-16T08:12:53.407Z", "date_only": false, "value": "2026-09-16T08:12:53.407Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-92392", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-09T15:04:00.630Z", "date_only": false, "value": "2026-10-09T15:04:00.630000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2026-10-09T15:04:00.630Z", "date_only": false, "value": "2026-10-09T15:04:00.630000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.6.discovery_date"}, {"timestamp": "2026-10-11T12:41:29Z", "date_only": false, "value": "2026-10-11T12:41:29+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-11T12:41:29Z", "date_only": false, "value": "2026-10-11T12:41:29+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-11T12:41:29Z", "date_only": false, "value": "2026-10-11T12:41:29+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-12T07:51:30.717Z", "date_only": false, "value": "2026-10-12T07:51:30.717069Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxnzvjvr6yf2", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "857e1d36-e31c-41d9-9877-e8ab0c323e75", "content": "Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown out of proportions or was underestimated or something else. That happened the last time we reported a HIGH severity issue and I expect it to happen again.\n\nlibcurl is a rather generic LIBRARY - it is used in [\u2026]", "url": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxnzvjvr6yf2"}, {"timestamp": "2026-10-12T07:51:32.846Z", "date_only": false, "value": "2026-10-12T07:51:32.846945Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/bagder/statuses/117426845493633803", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "a3c141ca-1a29-46d1-9bc6-b6289c8919bd", "content": "Come Wednesday, CVE-2026-92392 is the #curl CVE everyone will think either was blown out of proportions or was underestimated or something else. That happened the last time we reported a HIGH severity issue and I expect it to happen again.\nlibcurl is a rather generic LIBRARY - it is used in almost every device on earth, how the heck can we tell how important a particular mistake is for each and every use case? We can't. You need to read the advisory and figure it out yourself.", "url": "https://mastodon.social/users/bagder/statuses/117426845493633803"}, {"timestamp": "2026-10-13T08:22:40.895Z", "date_only": false, "value": "2026-10-13T08:22:40.895566Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "3adac8b6-c2f5-4bb2-bb52-ea6288d2a08f", "content": "Top 3 CVE for last 7 days:\nCVE-2026-21589: 79 interactions\nCVE-2026-102255: 21 interactions\nCVE-2026-107406: 14 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-97229: 14 interactions\nCVE-2026-92392: 7 interactions\nCVE-2025-41450: 5 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxqm4d56tu26"}, {"timestamp": "2026-10-13T09:59:04.450Z", "date_only": false, "value": "2026-10-13T09:59:04.450000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.4.discovery_date"}, {"timestamp": "2026-10-13T11:20:33.991Z", "date_only": false, "value": "2026-10-13T11:20:33.991000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.3.discovery_date"}, {"timestamp": "2026-10-13T16:51:39.261Z", "date_only": false, "value": "2026-10-13T16:51:39.261000+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.5.discovery_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "last_revision_date"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": true, "value": "2026-10-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-10-14T00:00:00Z", "date_only": false, "value": "2026-10-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-1307", "record": "CERTFR-2026-AVI-1307", "field": "revisions.0.revision_date"}, {"timestamp": "2026-10-14T06:11:44.059Z", "date_only": false, "value": "2026-10-14T06:11:44.059123Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxsvayrr4qa2", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "ef41bfe4-0653-49a5-9822-40bedf9409dd", "content": "A UAF turned RCE\n\nIn the #curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free.\n\nhttps://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/", "url": "https://bsky.app/profile/bagder.mastodon.social.ap.brid.gy/post/3mxsvayrr4qa2"}, {"timestamp": "2026-10-14T06:11:45.868Z", "date_only": false, "value": "2026-10-14T06:11:45.868331Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/bagder/statuses/117437778580681991", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "ca5e70cd-7a6f-4b89-9cfd-ac97fe51484b", "content": "A UAF turned RCE\nIn the #curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free.\nhttps://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/", "url": "https://mastodon.social/users/bagder/statuses/117437778580681991"}, {"timestamp": "2026-10-14T06:24:25.857Z", "date_only": false, "value": "2026-10-14T06:24:25.857349Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dk3jf.radiosocial.de.ap.brid.gy/post/3mxsvwxws2z22", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "1795bf20-d56a-434e-842d-66d1c5f648ad", "content": "It is 0 Days since it was #useafterfree #curl #RCE\n\nPackage : curl\nCVE ID : CVE-2026-92392\n\n#adminLive", "url": "https://bsky.app/profile/dk3jf.radiosocial.de.ap.brid.gy/post/3mxsvwxws2z22"}, {"timestamp": "2026-10-14T07:46:15.160Z", "date_only": false, "value": "2026-10-14T07:46:15.160Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-92392", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-14T07:46:15.160Z", "date_only": false, "value": "2026-10-14T07:46:15.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / curl", "record": "CVE-2026-92392", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T08:17:05Z", "date_only": false, "value": "2026-10-14T08:17:05Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7JVW-75GF-2H34", "record": "GHSA-7JVW-75GF-2H34", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-14T08:17:05.997Z", "date_only": false, "value": "2026-10-14T08:17:05.997", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92392", "record": "FKIE_CVE-2026-92392", "field": "published"}, {"timestamp": "2026-10-14T09:31:35Z", "date_only": false, "value": "2026-10-14T09:31:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7JVW-75GF-2H34", "record": "GHSA-7JVW-75GF-2H34", "field": "published"}, {"timestamp": "2026-10-14T09:48:15.395Z", "date_only": false, "value": "2026-10-14T09:48:15.395993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/4oeo4hqb6dfvp", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "b36c18ef-956a-4d6d-a519-a681b94ee2ef", "content": "CVE-2026-92392 - HTTP/2 upload Use-After-Free\nCVE ID : CVE-2026-92392\n \n Published : Oct. 14, 2026, 8:17 a.m. | 1\u00a0hour, 10\u00a0minutes ago\n \n Description : During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server\n(with reason `HTTP_1_1_REQUIRED` or `REFUSED_S...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/4oeo4hqb6dfvp"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2026-10-14T11:39:33Z", "date_only": false, "value": "2026-10-14T11:39:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.initial_release_date"}, {"timestamp": "2026-10-14T12:00:00Z", "date_only": false, "value": "2026-10-14T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2026-10-14T12:00:00Z", "date_only": false, "value": "2026-10-14T12:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "vulnerabilities.3.release_date"}, {"timestamp": "2026-10-14T14:48:25.746Z", "date_only": false, "value": "2026-10-14T14:48:25.746680Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxts4zkzgq2g", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "029f9a84-3195-41ed-8d72-2f7a90ae3756", "content": "\ud83e\udd16 CVE-2026-92392 (High): use-after-free in curl's HTTP/2 upload path, versions 8.12.0\u21928.22.0. A malicious server receiving a ~135KB upload corrupts the client's memory \u2014 the reporter turned it into client-side code execution. Fixed in curl 8.23.0.\nhttps://curl.se/docs/CVE-2026-92392.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxts4zkzgq2g"}, {"timestamp": "2026-10-14T16:35:27.586Z", "date_only": false, "value": "2026-10-14T16:35:27.586582Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xeiaso.net/post/3mxty4fom6d2u", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "f96ac4c1-6ac5-4afa-8a40-e033bc5d9c13", "content": "\"No way to prevent this\" say users of only language where this regularly happens\n\nhttps://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/", "url": "https://bsky.app/profile/xeiaso.net/post/3mxty4fom6d2u"}, {"timestamp": "2026-10-14T16:35:58.573Z", "date_only": false, "value": "2026-10-14T16:35:58.573152Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3mxty4vggpl22", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "8b30c752-b1ad-44f9-9f7c-9a596e57496b", "content": "\"No way to prevent this\" say users of only language where this regularly happens\n\nhttps://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/?utm_campaign=mi_irl&utm_medium=social&utm_source=mastodon", "url": "https://bsky.app/profile/cadey.pony.social.ap.brid.gy/post/3mxty4vggpl22"}, {"timestamp": "2026-10-14T17:01:02.083Z", "date_only": false, "value": "2026-10-14T17:01:02.083746Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117440332538962048", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "e8d482e6-8ea3-453a-b716-1bc824496ca8", "content": "curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution\nA use-after-free flaw in how curl handles HTTP/2 uploads (CVE-2026-92392) lets a malicious server corrupt the memory of a client uploading to it, and the reporting researcher demonstrated code execution on the client machine, The Hacker News reports. The flaw affects curl and libcurl 8.12.0 through 8.22.0 and is fixed in curl 8.23.0, released early on October 14. https://thehackernews.com/2026/10/curl-patches-http2-upload-flaw-after.html", "url": "https://infosec.exchange/users/edwardk/statuses/117440332538962048"}, {"timestamp": "2026-10-14T17:01:03.614Z", "date_only": false, "value": "2026-10-14T17:01:03.614931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxtzk5wdbl2n", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "169e0030-7dcd-4584-8272-adbfb5e8dc6e", "content": "curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution\n\nA use-after-free flaw in how curl handles HTTP/2 uploads (CVE-2026-92392) lets a malicious server corrupt the memory of a client uploading to it,... https://threatintel.cc/2026/10/14/curl-patches-http-upload-flaw.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxtzk5wdbl2n"}, {"timestamp": "2026-10-14T17:17:20.743Z", "date_only": false, "value": "2026-10-14T17:17:20.743412Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3mxu2hc73fl2p", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "c3d7c632-d011-4a7c-b792-4532a6c49e29", "content": "[some-subscribed-rss] New Post: \"No way to prevent this\" say users of only language where this regularly happens, by  https://xeiaso.net/shitposts/no-way-to-prevent-this/memory-safety/CVE-2026-92392/", "url": "https://bsky.app/profile/some-rss-feeds.bsky.social/post/3mxu2hc73fl2p"}, {"timestamp": "2026-10-14T17:28:48Z", "date_only": false, "value": "2026-10-14T17:28:48+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-14T17:30:46.295Z", "date_only": false, "value": "2026-10-14T17:30:46.295602Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hexonbot.bsky.social/post/3mxu37cstv72e", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "96bfd800-edd3-40b2-8720-7c83f59bc4d9", "content": "A malicious HTTP/2 upload destination can attack the client. CVE-2026-92392 affects curl and libcurl 8.12.0-8.22.0. Find upload workflows, patch, and restrict destinations. https://www.hexon.bot/blog/curl-http2-upload-vulnerability #Cybersecurity #DevSecOps #Curl", "url": "https://bsky.app/profile/hexonbot.bsky.social/post/3mxu37cstv72e"}, {"timestamp": "2026-10-14T17:43:00.031Z", "date_only": false, "value": "2026-10-14T17:43:00.031509Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117440497547756198", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "1fb521de-698e-489b-a7ad-4c0d1127683c", "content": "CVE-2026-92392 HTTP/2 upload Use-After-Free During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server(with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use afterfree of a `struct Curl_easy` object.\nhttps://www.cve.org/CVERecord?id=CVE-2026-92392https://curl.se/docs/CVE-2026-92392.jsonhttps://curl.se/docs/CVE-2026-92392.htmlhttps://hackerone.com/reports/4030333#curl#CVE_2026_92392#bot", "url": "https://infosec.exchange/users/cve/statuses/117440497547756198"}, {"timestamp": "2026-10-15T03:56:56.051Z", "date_only": false, "value": "2026-10-15T03:56:56.051034Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92392", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2026-10-15T03:56:56.051Z", "date_only": false, "value": "2026-10-15T03:56:56.051034Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92392", "record": "FKIE_CVE-2026-92392", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T04:34:40.725Z", "date_only": false, "value": "2026-10-15T04:34:40.725193Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mxvachqezb2f", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "e3fb42af-e07a-4a21-a5ab-b753a9a5d3e5", "content": "The latest update for #Canonical includes \"Fixes available for CVE-2026-92392 and other curl vulnerabilities\" and \"Myna speech-to-text is now available as a technology preview\".\n \n#Cloud #OpenSource #Ubuntu https://opsmtrs.com/2Wcir8A", "url": "https://bsky.app/profile/opsmatters.com/post/3mxvachqezb2f"}, {"timestamp": "2026-10-15T06:21:55.656Z", "date_only": false, "value": "2026-10-15T06:21:55.656701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mxvgcaicci25", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "829c7946-1ac2-4405-b7f2-121bf7127ed8", "content": "Top 3 CVE for last 7 days:\nCVE-2026-92392: 62 interactions\nCVE-2026-97229: 36 interactions\nCVE-2026-104935: 35 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-92392: 55 interactions\nCVE-2026-96951: 20 interactions\nCVE-2026-104935: 9 interactions\n", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mxvgcaicci25"}, {"timestamp": "2026-10-15T09:41:48.359Z", "date_only": false, "value": "2026-10-15T09:41:48.359802Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3mxvrhnfv5h25", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "ca3a3189-78f6-4070-baeb-80cb7e2b4178", "content": "News 12/29\ncurl 8.23.0 fixes 24 flaws, one rated high, and drops SMB support\n\nThe high-rated flaw, CVE-2026-92392, is a use-after-free in HTTP/2 uploads affecting curl 8.12.0 to 8.22.0.\n\n#infosec #cybersecurity\ntrustlist.uk/news/curl-8-23-0-f\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3mxvrhnfv5h25"}, {"timestamp": "2026-10-15T10:28:17.201Z", "date_only": false, "value": "2026-10-15T10:28:17.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-92392", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T10:28:17.201Z", "date_only": false, "value": "2026-10-15T10:28:17.201Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-92392", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T11:18:03.600Z", "date_only": false, "value": "2026-10-15T11:18:03.600", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-92392", "record": "FKIE_CVE-2026-92392", "field": "lastModified"}, {"timestamp": "2026-10-15T12:30:56Z", "date_only": false, "value": "2026-10-15T12:30:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7JVW-75GF-2H34", "record": "GHSA-7JVW-75GF-2H34", "field": "modified"}, {"timestamp": "2026-10-15T13:52:39Z", "date_only": false, "value": "2026-10-15T13:52:39+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-15T13:59:49.364Z", "date_only": false, "value": "2026-10-15T13:59:49.364973Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxw7uyylj22y", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "b3932f7e-da44-44f0-9466-222ae25b07e9", "content": "The cURL CVE-2026-92392 vulnerability enables remote code execution during HTTP/2 uploads. Update to cURL 8.23.0 or disable HTTP/2 to protect systems.\n\n#cURL #CVE202692392 #Cybersecurity #Vulnerability #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxw7uyylj22y"}, {"timestamp": "2026-10-15T14:40:51Z", "date_only": false, "value": "2026-10-15T14:40:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-15T14:40:51Z", "date_only": false, "value": "2026-10-15T14:40:51+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T14:40:51Z", "date_only": false, "value": "2026-10-15T14:40:51+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:80349", "record": "RHSA-2026:80349", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-15T15:40:24.672Z", "date_only": false, "value": "2026-10-15T15:40:24.672254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crawler.baldanders.info/post/3mxwfiuowh52n", "record": "cve-2026-92392", "field": "creation_timestamp", "uuid": "6e510a1f-d2e9-436e-9e8c-285d18677051", "content": "\uff1e Ubuntu 26.04 \u305d\u306e76 - CVE-2026-92392 \u542b\u3080 curl \u306e\u8106\u5f31\u602722\u4ef6\u4fee\u6b63\u30fb\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u3092\nhttps://kledgeb.blogspot.com/2026/10/ubuntu-2604-76-cve-2026-92392-curl-22.html\n", "url": "https://bsky.app/profile/crawler.baldanders.info/post/3mxwfiuowh52n"}, {"timestamp": "2026-10-15T19:17:20Z", "date_only": false, "value": "2026-10-15T19:17:20+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-15T19:17:20Z", "date_only": false, "value": "2026-10-15T19:17:20+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T19:17:20Z", "date_only": false, "value": "2026-10-15T19:17:20+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2026:82895", "record": "RHSA-2026:82895", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-15T22:03:44.987Z", "date_only": false, "value": "2026-10-15T22:03:44.987962Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mxx2wdrfnu2y", "record": "CVE-2026-92392", "field": "creation_timestamp", "uuid": "70fe2dda-6cbb-450c-9038-a9c465423849", "content": "The curl 8.23.0 release fixes critical vulnerability CVE-2026-92392, an HTTP/2 use-after-free flaw surfaced by Anthropic that permits remote code execution.\n\n#curl #CVE202692392 #Cybersecurity #Anthropic #Vulnerability", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mxx2wdrfnu2y"}]}