https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T09:32:31.162972+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-2466 CVE-2024-2466 — TLS certificate check bypass with mbedTLS 2026-09-28T09:32:31.164942+00:00

Affected: curl, curl libcurl

libcurl did not check the server certificate of TLS connections done to a host specified as an IP address, when built to use mbedTLS. libcurl would wrongly avoid using the set hostname function when the specified hostname was given as an IP address, therefore completely skipping the certificate check. This affects all uses of TLS protocols (HTTPS, FTPS, IMAPS, POPS3, SMTPS, etc).