Log in / Sign up

Vulnerability details

CVE-2026-82209

curl curl

domain-scoped PSL domain cookie

CVSS 3.1
8.2High

Official description

When libpsl support is enabled, libcurl fails to enforce the Public Suffix List boundary check when processing a `Set-Cookie` header where the `Domain` attribute explicitly matches an origin host that is itself a public suffix (e.g., `Domain=co.uk` set by `co.uk`). Instead of coercing it into a strict host-only cookie, libcurl saves the cookie with wildcard domain scope (`.co.uk`). Consequently, the cookie is inappropriately included in subsequent outbound requests or HTTP redirects to arbitrary sibling subdomains under the same public suffix (e.g., `attacker.co.uk`).

CVSS scores

ScoreVersionSourceVector
8.2High 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N

Affected products

VendorProductVersionsSource
curl curl 7.46.0 CVEProject cvelistV5 (CNA)
curl curl 7.47.0 CVEProject cvelistV5 (CNA)
curl curl 7.47.1 CVEProject cvelistV5 (CNA)
curl curl 7.48.0 CVEProject cvelistV5 (CNA)
curl curl 7.49.0 CVEProject cvelistV5 (CNA)
curl curl 7.49.1 CVEProject cvelistV5 (CNA)
curl curl 7.50.0 CVEProject cvelistV5 (CNA)
curl curl 7.50.1 CVEProject cvelistV5 (CNA)
curl curl 7.50.2 CVEProject cvelistV5 (CNA)
curl curl 7.50.3 CVEProject cvelistV5 (CNA)
curl curl 7.51.0 CVEProject cvelistV5 (CNA)
curl curl 7.52.0 CVEProject cvelistV5 (CNA)
curl curl 7.52.1 CVEProject cvelistV5 (CNA)
curl curl 7.53.0 CVEProject cvelistV5 (CNA)
curl curl 7.53.1 CVEProject cvelistV5 (CNA)
curl curl 7.54.0 CVEProject cvelistV5 (CNA)
curl curl 7.54.1 CVEProject cvelistV5 (CNA)
curl curl 7.55.0 CVEProject cvelistV5 (CNA)
curl curl 7.55.1 CVEProject cvelistV5 (CNA)
curl curl 7.56.0 CVEProject cvelistV5 (CNA)
curl curl 7.56.1 CVEProject cvelistV5 (CNA)
curl curl 7.57.0 CVEProject cvelistV5 (CNA)
curl curl 7.58.0 CVEProject cvelistV5 (CNA)
curl curl 7.59.0 CVEProject cvelistV5 (CNA)
curl curl 7.60.0 CVEProject cvelistV5 (CNA)
curl curl 7.61.0 CVEProject cvelistV5 (CNA)
curl curl 7.61.1 CVEProject cvelistV5 (CNA)
curl curl 7.62.0 CVEProject cvelistV5 (CNA)
curl curl 7.63.0 CVEProject cvelistV5 (CNA)
curl curl 7.64.0 CVEProject cvelistV5 (CNA)
curl curl 7.64.1 CVEProject cvelistV5 (CNA)
curl curl 7.65.0 CVEProject cvelistV5 (CNA)
curl curl 7.65.1 CVEProject cvelistV5 (CNA)
curl curl 7.65.2 CVEProject cvelistV5 (CNA)
curl curl 7.65.3 CVEProject cvelistV5 (CNA)
curl curl 7.66.0 CVEProject cvelistV5 (CNA)
curl curl 7.67.0 CVEProject cvelistV5 (CNA)
curl curl 7.68.0 CVEProject cvelistV5 (CNA)
curl curl 7.69.0 CVEProject cvelistV5 (CNA)
curl curl 7.69.1 CVEProject cvelistV5 (CNA)
curl curl 7.70.0 CVEProject cvelistV5 (CNA)
curl curl 7.71.0 CVEProject cvelistV5 (CNA)
curl curl 7.71.1 CVEProject cvelistV5 (CNA)
curl curl 7.72.0 CVEProject cvelistV5 (CNA)
curl curl 7.73.0 CVEProject cvelistV5 (CNA)
curl curl 7.74.0 CVEProject cvelistV5 (CNA)
curl curl 7.75.0 CVEProject cvelistV5 (CNA)
curl curl 7.76.0 CVEProject cvelistV5 (CNA)
curl curl 7.76.1 CVEProject cvelistV5 (CNA)
curl curl 7.77.0 CVEProject cvelistV5 (CNA)
curl curl 7.78.0 CVEProject cvelistV5 (CNA)
curl curl 7.79.0 CVEProject cvelistV5 (CNA)
curl curl 7.79.1 CVEProject cvelistV5 (CNA)
curl curl 7.80.0 CVEProject cvelistV5 (CNA)
curl curl 7.81.0 CVEProject cvelistV5 (CNA)
curl curl 7.82.0 CVEProject cvelistV5 (CNA)
curl curl 7.83.0 CVEProject cvelistV5 (CNA)
curl curl 7.83.1 CVEProject cvelistV5 (CNA)
curl curl 7.84.0 CVEProject cvelistV5 (CNA)
curl curl 7.85.0 CVEProject cvelistV5 (CNA)
curl curl 7.86.0 CVEProject cvelistV5 (CNA)
curl curl 7.87.0 CVEProject cvelistV5 (CNA)
curl curl 7.88.0 CVEProject cvelistV5 (CNA)
curl curl 7.88.1 CVEProject cvelistV5 (CNA)
curl curl 8.0.0 CVEProject cvelistV5 (CNA)
curl curl 8.0.1 CVEProject cvelistV5 (CNA)
curl curl 8.1.0 CVEProject cvelistV5 (CNA)
curl curl 8.1.1 CVEProject cvelistV5 (CNA)
curl curl 8.1.2 CVEProject cvelistV5 (CNA)
curl curl 8.10.0 CVEProject cvelistV5 (CNA)
curl curl 8.10.1 CVEProject cvelistV5 (CNA)
curl curl 8.11.0 CVEProject cvelistV5 (CNA)
curl curl 8.11.1 CVEProject cvelistV5 (CNA)
curl curl 8.12.0 CVEProject cvelistV5 (CNA)
curl curl 8.12.1 CVEProject cvelistV5 (CNA)
curl curl 8.13.0 CVEProject cvelistV5 (CNA)
curl curl 8.14.0 CVEProject cvelistV5 (CNA)
curl curl 8.14.1 CVEProject cvelistV5 (CNA)
curl curl 8.15.0 CVEProject cvelistV5 (CNA)
curl curl 8.16.0 CVEProject cvelistV5 (CNA)
curl curl 8.17.0 CVEProject cvelistV5 (CNA)
curl curl 8.18.0 CVEProject cvelistV5 (CNA)
curl curl 8.19.0 CVEProject cvelistV5 (CNA)
curl curl 8.2.0 CVEProject cvelistV5 (CNA)
curl curl 8.2.1 CVEProject cvelistV5 (CNA)
curl curl 8.20.0 CVEProject cvelistV5 (CNA)
curl curl 8.21.0 CVEProject cvelistV5 (CNA)
curl curl 8.3.0 CVEProject cvelistV5 (CNA)
curl curl 8.4.0 CVEProject cvelistV5 (CNA)
curl curl 8.5.0 CVEProject cvelistV5 (CNA)
curl curl 8.6.0 CVEProject cvelistV5 (CNA)
curl curl 8.7.0 CVEProject cvelistV5 (CNA)
curl curl 8.7.1 CVEProject cvelistV5 (CNA)
curl curl 8.8.0 CVEProject cvelistV5 (CNA)
curl curl 8.9.0 CVEProject cvelistV5 (CNA)
curl curl 8.9.1 CVEProject cvelistV5 (CNA)
curl curl 7.46.0 ≤ v < 8.14.2 CVEProject cvelistV5 (CNA)
curl curl 8.15.0 ≤ v < 8.16.1 CVEProject cvelistV5 (CNA)
curl curl 8.17.0 ≤ v < 8.20.1 CVEProject cvelistV5 (CNA)
curl curl 8.21.0 ≤ v < 8.22.0 CVEProject cvelistV5 (CNA)
curl curl e77b5b7453c1e8ccd7ec0816890d98e2f392e465 ≤ v < 95c1e8915dce64606bd753fd47fc0bd236e31cd6 CVEProject cvelistV5 (CNA)

References and advisories

3
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2026-09-06
Last updated
2026-09-15
State
Published
Assigner (CNA)
curl

Exploit prediction (EPSS)

0.37%
Probability of exploitation in 30 days
31.4%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
Yes
Exploitation
Proof of concept
Technical impact
Partial

Weaknesses (CWE)

  • CWE-201
    Information Exposure Through Sent Data