CVE-2026-80231
High · 7.5CVSS
7.5
EPSS
0.9%
Published
Sep 6, 2026
CISA due date
—
The record
A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting (`CURLSSLOPT_NATIVE_CA`) than when the connection was created.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-71850 Hono is a Web application framework that provides support for any JavaScript runtime. CWE-488
- CVE-2026-54311 n8n is an open source workflow automation platform. CWE-488
- GHSA-9c38-2mcm-q7f7 n8n: Merge Node SQL Mode Prototype Pollution CWE-488
- CVE-2026-9831 A race condition in the shared Extreme Platform ONE IAM Gateway API-key authentication… CWE-488
- CVE-2026-46416 Microsoft UFO open-source framework for intelligent automation across devices and… CWE-488
- CVE-2026-34391 Fleet is open source device management software. CWE-488
- CVE-2026-33215 NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging… CWE-488
- CVE-2026-23919 For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in… CWE-488