C
Vendor security profile
curl
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs53
Critical10
CISA KEV0
Public exploit46
Patch rate%98
Avg. CVSS7.1
12-month vulnerability rate
1
0
6
0
4
0
7
0
18
0
9
0
CVE KEV
CVE severity distribution
53toplam CVE
Critical10 (19%)
High23 (43%)
Medium18 (34%)
Low2 (4%)
Patch and exploitation view
%98
Verified patch
%0
CISA KEV
%87
Public exploit
52Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
8.2
CVE-2026-82209
domain-scoped PSL domain cookie
C
Patch verifiedEPSS %0
7.5
CVE-2026-82208
wolfSSL CA-cache hit overrides callback
C
Patch verifiedEPSS %0
7.5
CVE-2026-80255
secure cookie attribute bypass with tab
C
Patch verifiedEPSS %0
7.5
CVE-2026-80231
native CA store conn reuse
C
Patch verifiedEPSS %1
7.5
CVE-2026-80230
OpenSSL pinning bypass
C
Patch verifiedEPSS %0
7.5
CVE-2026-80229
OpenSSL provider use-after-free
C
Patch verifiedEPSS %1
9.8
CVE-2026-19931
Negotiate ambient user conn reuse
C
Patch verifiedEPSS %1
9.1
CVE-2026-18924
HTTP/2 server push UAF
C
Patch verifiedEPSS %1
7.4
CVE-2026-13608
OpenLDAP SASL authentication bypass
C
Patch verifiedEPSS %0
7.4
CVE-2026-9547
SSH improper host validation
C
Patch verifiedEPSS %0