Index

Search

Search the public record. Drafts and scheduled notes are not included.

research

curl HTTP/2 upload flaw CVE-2026-92392 PoC reached code execution

curl 8.23.0 fixes CVE-2026-92392, a use-after-free a malicious HTTP/2 server can trigger during an upload. The curl project rates it High. A reporter PoC reached code execution under strict conditions. Affects 8.12.0 to 8.22.0. Not in CISA KEV.

Published 4h ago

HighPoC Available

CVE-2026-92392

curl and libcurl HTTP/2 upload use-after-free

RCE

Published 13h ago