https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 12:37:03 +0000 https://vulnerability.circl.lu/vuln/cve-2026-5773 <p><strong>Affected:</strong> curl</p> <p>libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.</p> <p>libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.</p> <p>When reusing a connection a range of criteria must be met. Due to a logical error in the code, a network transfer operation that was requested by an application could wrongfully reuse an existing SMB connection to the same server that was using a different &#34;share&#34; than the new subsequent transfer should.</p> <p>This could in unlucky situations lead to the download of the wrong file or the upload of a file to the wrong place. When this happens, the same credentials are used and the server name is the same.</p> <p><strong>Affected:</strong> curl</p> <p>libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.</p> <p>libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.</p> <p>When reusing a connection a range of criteria must be met. Due to a logical error in the code, a network transfer operation that was requested by an application could wrongfully reuse an existing SMB connection to the same server that was using a different &#34;share&#34; than the new subsequent transfer should.</p> <p>This could in unlucky situations lead to the download of the wrong file or the upload of a file to the wrong place. When this happens, the same credentials are used and the server name is the same.</p> https://vulnerability.circl.lu/vuln/cve-2026-5773