CVE-2026-80231 - Vulnerability Details - OpenCVE

A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting (`CURLSSLOPT_NATIVE_CA`) than when the connection was created.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable yes

Technical Impact partial

Vendors	Products
Curl	Curl

No data.

No data.

References

Link	Providers
https://curl.se/docs/CVE-2026-80231.html
https://curl.se/docs/CVE-2026-80231.json
https://hackerone.com/reports/3969368

History

Thu, 10 Sep 2026 04:45:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-295

Tue, 08 Sep 2026 19:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-488
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sun, 06 Sep 2026 20:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-295

Sun, 06 Sep 2026 19:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Curl Curl curl
Vendors & Products		Curl Curl curl

Sun, 06 Sep 2026 18:00:00 +0000

Type	Values Removed	Values Added
Description		A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup for a given hostname even when using a different Native CA Store setting (`CURLSSLOPT_NATIVE_CA`) than when the connection was created.
Title		native CA store conn reuse
References		https://curl.se/docs/CVE-2026-80231.html https://curl.se/docs/CVE-2026-80231.json https://hackerone.com/reports/3969368

MITRE

Status: PUBLISHED

Assigner: curl

Published: 2026-09-06T17:48:38.062Z

Updated: 2026-09-08T18:51:07.952Z

Reserved: 2026-08-26T04:24:27.361Z

Link: CVE-2026-80231

Vulnrichment

Updated: 2026-09-08T18:50:55.455Z

NVD

Status : Undergoing Analysis

Published: 2026-09-06T18:17:22.500

Modified: 2026-09-08T19:19:54.307

Link: CVE-2026-80231

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80231", "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "state": "PUBLISHED", "assignerShortName": "curl", "dateReserved": "2026-08-26T04:24:27.361Z", "datePublished": "2026-09-06T17:48:38.062Z", "dateUpdated": "2026-09-08T18:51:07.952Z"}, "containers": {"cna": {"title": "native CA store conn reuse", "descriptions": [{"lang": "en", "value": "A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created."}], "providerMetadata": {"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "shortName": "curl", "dateUpdated": "2026-09-06T17:48:38.062Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-488 Exposure of Data Element to Wrong Session"}]}], "affected": [{"vendor": "curl", "product": "curl", "versions": [{"version": "8.21.0", "status": "affected", "lessThanOrEqual": "8.21.0", "versionType": "semver"}, {"version": "8.20.0", "status": "affected", "lessThanOrEqual": "8.20.0", "versionType": "semver"}, {"version": "8.19.0", "status": "affected", "lessThanOrEqual": "8.19.0", "versionType": "semver"}, {"version": "8.18.0", "status": "affected", "lessThanOrEqual": "8.18.0", "versionType": "semver"}, {"version": "8.17.0", "status": "affected", "lessThanOrEqual": "8.17.0", "versionType": "semver"}, {"version": "8.16.0", "status": "affected", "lessThanOrEqual": "8.16.0", "versionType": "semver"}, {"version": "8.15.0", "status": "affected", "lessThanOrEqual": "8.15.0", "versionType": "semver"}, {"version": "8.14.1", "status": "affected", "lessThanOrEqual": "8.14.1", "versionType": "semver"}, {"version": "8.14.0", "status": "affected", "lessThanOrEqual": "8.14.0", "versionType": "semver"}, {"version": "8.13.0", "status": "affected", "lessThanOrEqual": "8.13.0", "versionType": "semver"}, {"version": "8.12.1", "status": "affected", "lessThanOrEqual": "8.12.1", "versionType": "semver"}, {"version": "8.12.0", "status": "affected", "lessThanOrEqual": "8.12.0", "versionType": "semver"}, {"version": "8.11.1", "status": "affected", "lessThanOrEqual": "8.11.1", "versionType": "semver"}, {"version": "8.11.0", "status": "affected", "lessThanOrEqual": "8.11.0", "versionType": "semver"}, {"version": "8.10.1", "status": "affected", "lessThanOrEqual": "8.10.1", "versionType": "semver"}, {"version": "8.10.0", "status": "affected", "lessThanOrEqual": "8.10.0", "versionType": "semver"}, {"version": "8.9.1", "status": "affected", "lessThanOrEqual": "8.9.1", "versionType": "semver"}, {"version": "8.9.0", "status": "affected", "lessThanOrEqual": "8.9.0", "versionType": "semver"}, {"version": "8.8.0", "status": "affected", "lessThanOrEqual": "8.8.0", "versionType": "semver"}, {"version": "8.7.1", "status": "affected", "lessThanOrEqual": "8.7.1", "versionType": "semver"}, {"version": "8.7.0", "status": "affected", "lessThanOrEqual": "8.7.0", "versionType": "semver"}, {"version": "8.6.0", "status": "affected", "lessThanOrEqual": "8.6.0", "versionType": "semver"}, {"version": "8.5.0", "status": "affected", "lessThanOrEqual": "8.5.0", "versionType": "semver"}, {"version": "8.4.0", "status": "affected", "lessThanOrEqual": "8.4.0", "versionType": "semver"}, {"version": "8.3.0", "status": "affected", "lessThanOrEqual": "8.3.0", "versionType": "semver"}, {"version": "8.2.1", "status": "affected", "lessThanOrEqual": "8.2.1", "versionType": "semver"}, {"version": "8.2.0", "status": "affected", "lessThanOrEqual": "8.2.0", "versionType": "semver"}, {"version": "8.1.2", "status": "affected", "lessThanOrEqual": "8.1.2", "versionType": "semver"}, {"version": "8.1.1", "status": "affected", "lessThanOrEqual": "8.1.1", "versionType": "semver"}, {"version": "8.1.0", "status": "affected", "lessThanOrEqual": "8.1.0", "versionType": "semver"}, {"version": "8.0.1", "status": "affected", "lessThanOrEqual": "8.0.1", "versionType": "semver"}, {"version": "8.0.0", "status": "affected", "lessThanOrEqual": "8.0.0", "versionType": "semver"}, {"version": "7.88.1", "status": "affected", "lessThanOrEqual": "7.88.1", "versionType": "semver"}, {"version": "7.88.0", "status": "affected", "lessThanOrEqual": "7.88.0", "versionType": "semver"}, {"version": "7.87.0", "status": "affected", "lessThanOrEqual": "7.87.0", "versionType": "semver"}, {"version": "7.86.0", "status": "affected", "lessThanOrEqual": "7.86.0", "versionType": "semver"}, {"version": "7.85.0", "status": "affected", "lessThanOrEqual": "7.85.0", "versionType": "semver"}, {"version": "7.84.0", "status": "affected", "lessThanOrEqual": "7.84.0", "versionType": "semver"}, {"version": "7.83.1", "status": "affected", "lessThanOrEqual": "7.83.1", "versionType": "semver"}, {"version": "7.83.0", "status": "affected", "lessThanOrEqual": "7.83.0", "versionType": "semver"}, {"version": "7.82.0", "status": "affected", "lessThanOrEqual": "7.82.0", "versionType": "semver"}, {"version": "7.81.0", "status": "affected", "lessThanOrEqual": "7.81.0", "versionType": "semver"}, {"version": "7.80.0", "status": "affected", "lessThanOrEqual": "7.80.0", "versionType": "semver"}, {"version": "7.79.1", "status": "affected", "lessThanOrEqual": "7.79.1", "versionType": "semver"}, {"version": "7.79.0", "status": "affected", "lessThanOrEqual": "7.79.0", "versionType": "semver"}, {"version": "7.78.0", "status": "affected", "lessThanOrEqual": "7.78.0", "versionType": "semver"}, {"version": "7.77.0", "status": "affected", "lessThanOrEqual": "7.77.0", "versionType": "semver"}, {"version": "7.76.1", "status": "affected", "lessThanOrEqual": "7.76.1", "versionType": "semver"}, {"version": "7.76.0", "status": "affected", "lessThanOrEqual": "7.76.0", "versionType": "semver"}, {"version": "7.75.0", "status": "affected", "lessThanOrEqual": "7.75.0", "versionType": "semver"}, {"version": "7.74.0", "status": "affected", "lessThanOrEqual": "7.74.0", "versionType": "semver"}, {"version": "7.73.0", "status": "affected", "lessThanOrEqual": "7.73.0", "versionType": "semver"}, {"version": "7.72.0", "status": "affected", "lessThanOrEqual": "7.72.0", "versionType": "semver"}, {"version": "7.71.1", "status": "affected", "lessThanOrEqual": "7.71.1", "versionType": "semver"}, {"version": "7.71.0", "status": "affected", "lessThanOrEqual": "7.71.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://curl.se/docs/CVE-2026-80231.json", "name": "json"}, {"url": "https://curl.se/docs/CVE-2026-80231.html", "name": "www"}, {"url": "https://hackerone.com/reports/3969368", "name": "issue"}], "credits": [{"lang": "en", "value": "Stanislav Fort (Aisle Research)", "type": "finder"}, {"lang": "en", "value": "Daniel Stenberg", "type": "remediation developer"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-488", "lang": "en", "description": "CWE-488 Exposure of Data Element to Wrong Session"}]}], "references": [{"url": "https://hackerone.com/reports/3969368", "tags": ["exploit"]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-09-08T18:50:09.901920Z", "id": "CVE-2026-80231", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-08T18:51:07.952Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-80231", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-08T18:50:09.901920Z"}}}], "references": [{"url": "https://hackerone.com/reports/3969368", "tags": ["exploit"]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-488", "description": "CWE-488 Exposure of Data Element to Wrong Session"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-09-08T18:50:55.455Z"}}], "cna": {"title": "native CA store conn reuse", "credits": [{"lang": "en", "type": "finder", "value": "Stanislav Fort (Aisle Research)"}, {"lang": "en", "type": "remediation developer", "value": "Daniel Stenberg"}], "affected": [{"vendor": "curl", "product": "curl", "versions": [{"status": "affected", "version": "8.21.0", "versionType": "semver", "lessThanOrEqual": "8.21.0"}, {"status": "affected", "version": "8.20.0", "versionType": "semver", "lessThanOrEqual": "8.20.0"}, {"status": "affected", "version": "8.19.0", "versionType": "semver", "lessThanOrEqual": "8.19.0"}, {"status": "affected", "version": "8.18.0", "versionType": "semver", "lessThanOrEqual": "8.18.0"}, {"status": "affected", "version": "8.17.0", "versionType": "semver", "lessThanOrEqual": "8.17.0"}, {"status": "affected", "version": "8.16.0", "versionType": "semver", "lessThanOrEqual": "8.16.0"}, {"status": "affected", "version": "8.15.0", "versionType": "semver", "lessThanOrEqual": "8.15.0"}, {"status": "affected", "version": "8.14.1", "versionType": "semver", "lessThanOrEqual": "8.14.1"}, {"status": "affected", "version": "8.14.0", "versionType": "semver", "lessThanOrEqual": "8.14.0"}, {"status": "affected", "version": "8.13.0", "versionType": "semver", "lessThanOrEqual": "8.13.0"}, {"status": "affected", "version": "8.12.1", "versionType": "semver", "lessThanOrEqual": "8.12.1"}, {"status": "affected", "version": "8.12.0", "versionType": "semver", "lessThanOrEqual": "8.12.0"}, {"status": "affected", "version": "8.11.1", "versionType": "semver", "lessThanOrEqual": "8.11.1"}, {"status": "affected", "version": "8.11.0", "versionType": "semver", "lessThanOrEqual": "8.11.0"}, {"status": "affected", "version": "8.10.1", "versionType": "semver", "lessThanOrEqual": "8.10.1"}, {"status": "affected", "version": "8.10.0", "versionType": "semver", "lessThanOrEqual": "8.10.0"}, {"status": "affected", "version": "8.9.1", "versionType": "semver", "lessThanOrEqual": "8.9.1"}, {"status": "affected", "version": "8.9.0", "versionType": "semver", "lessThanOrEqual": "8.9.0"}, {"status": "affected", "version": "8.8.0", "versionType": "semver", "lessThanOrEqual": "8.8.0"}, {"status": "affected", "version": "8.7.1", "versionType": "semver", "lessThanOrEqual": "8.7.1"}, {"status": "affected", "version": "8.7.0", "versionType": "semver", "lessThanOrEqual": "8.7.0"}, {"status": "affected", "version": "8.6.0", "versionType": "semver", "lessThanOrEqual": "8.6.0"}, {"status": "affected", "version": "8.5.0", "versionType": "semver", "lessThanOrEqual": "8.5.0"}, {"status": "affected", "version": "8.4.0", "versionType": "semver", "lessThanOrEqual": "8.4.0"}, {"status": "affected", "version": "8.3.0", "versionType": "semver", "lessThanOrEqual": "8.3.0"}, {"status": "affected", "version": "8.2.1", "versionType": "semver", "lessThanOrEqual": "8.2.1"}, {"status": "affected", "version": "8.2.0", "versionType": "semver", "lessThanOrEqual": "8.2.0"}, {"status": "affected", "version": "8.1.2", "versionType": "semver", "lessThanOrEqual": "8.1.2"}, {"status": "affected", "version": "8.1.1", "versionType": "semver", "lessThanOrEqual": "8.1.1"}, {"status": "affected", "version": "8.1.0", "versionType": "semver", "lessThanOrEqual": "8.1.0"}, {"status": "affected", "version": "8.0.1", "versionType": "semver", "lessThanOrEqual": "8.0.1"}, {"status": "affected", "version": "8.0.0", "versionType": "semver", "lessThanOrEqual": "8.0.0"}, {"status": "affected", "version": "7.88.1", "versionType": "semver", "lessThanOrEqual": "7.88.1"}, {"status": "affected", "version": "7.88.0", "versionType": "semver", "lessThanOrEqual": "7.88.0"}, {"status": "affected", "version": "7.87.0", "versionType": "semver", "lessThanOrEqual": "7.87.0"}, {"status": "affected", "version": "7.86.0", "versionType": "semver", "lessThanOrEqual": "7.86.0"}, {"status": "affected", "version": "7.85.0", "versionType": "semver", "lessThanOrEqual": "7.85.0"}, {"status": "affected", "version": "7.84.0", "versionType": "semver", "lessThanOrEqual": "7.84.0"}, {"status": "affected", "version": "7.83.1", "versionType": "semver", "lessThanOrEqual": "7.83.1"}, {"status": "affected", "version": "7.83.0", "versionType": "semver", "lessThanOrEqual": "7.83.0"}, {"status": "affected", "version": "7.82.0", "versionType": "semver", "lessThanOrEqual": "7.82.0"}, {"status": "affected", "version": "7.81.0", "versionType": "semver", "lessThanOrEqual": "7.81.0"}, {"status": "affected", "version": "7.80.0", "versionType": "semver", "lessThanOrEqual": "7.80.0"}, {"status": "affected", "version": "7.79.1", "versionType": "semver", "lessThanOrEqual": "7.79.1"}, {"status": "affected", "version": "7.79.0", "versionType": "semver", "lessThanOrEqual": "7.79.0"}, {"status": "affected", "version": "7.78.0", "versionType": "semver", "lessThanOrEqual": "7.78.0"}, {"status": "affected", "version": "7.77.0", "versionType": "semver", "lessThanOrEqual": "7.77.0"}, {"status": "affected", "version": "7.76.1", "versionType": "semver", "lessThanOrEqual": "7.76.1"}, {"status": "affected", "version": "7.76.0", "versionType": "semver", "lessThanOrEqual": "7.76.0"}, {"status": "affected", "version": "7.75.0", "versionType": "semver", "lessThanOrEqual": "7.75.0"}, {"status": "affected", "version": "7.74.0", "versionType": "semver", "lessThanOrEqual": "7.74.0"}, {"status": "affected", "version": "7.73.0", "versionType": "semver", "lessThanOrEqual": "7.73.0"}, {"status": "affected", "version": "7.72.0", "versionType": "semver", "lessThanOrEqual": "7.72.0"}, {"status": "affected", "version": "7.71.1", "versionType": "semver", "lessThanOrEqual": "7.71.1"}, {"status": "affected", "version": "7.71.0", "versionType": "semver", "lessThanOrEqual": "7.71.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://curl.se/docs/CVE-2026-80231.json", "name": "json"}, {"url": "https://curl.se/docs/CVE-2026-80231.html", "name": "www"}, {"url": "https://hackerone.com/reports/3969368", "name": "issue"}], "descriptions": [{"lang": "en", "value": "A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-488 Exposure of Data Element to Wrong Session"}]}], "providerMetadata": {"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "shortName": "curl", "dateUpdated": "2026-09-06T17:48:38.062Z"}}}, "cveMetadata": {"cveId": "CVE-2026-80231", "state": "PUBLISHED", "dateUpdated": "2026-09-08T18:51:07.952Z", "dateReserved": "2026-08-26T04:24:27.361Z", "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "datePublished": "2026-09-06T17:48:38.062Z", "assignerShortName": "curl"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "curl", "vendor": "curl", "versions": [{"lessThanOrEqual": "8.21.0", "status": "affected", "version": "8.21.0", "versionType": "semver"}, {"lessThanOrEqual": "8.20.0", "status": "affected", "version": "8.20.0", "versionType": "semver"}, {"lessThanOrEqual": "8.19.0", "status": "affected", "version": "8.19.0", "versionType": "semver"}, {"lessThanOrEqual": "8.18.0", "status": "affected", "version": "8.18.0", "versionType": "semver"}, {"lessThanOrEqual": "8.17.0", "status": "affected", "version": "8.17.0", "versionType": "semver"}, {"lessThanOrEqual": "8.16.0", "status": "affected", "version": "8.16.0", "versionType": "semver"}, {"lessThanOrEqual": "8.15.0", "status": "affected", "version": "8.15.0", "versionType": "semver"}, {"lessThanOrEqual": "8.14.1", "status": "affected", "version": "8.14.1", "versionType": "semver"}, {"lessThanOrEqual": "8.14.0", "status": "affected", "version": "8.14.0", "versionType": "semver"}, {"lessThanOrEqual": "8.13.0", "status": "affected", "version": "8.13.0", "versionType": "semver"}, {"lessThanOrEqual": "8.12.1", "status": "affected", "version": "8.12.1", "versionType": "semver"}, {"lessThanOrEqual": "8.12.0", "status": "affected", "version": "8.12.0", "versionType": "semver"}, {"lessThanOrEqual": "8.11.1", "status": "affected", "version": "8.11.1", "versionType": "semver"}, {"lessThanOrEqual": "8.11.0", "status": "affected", "version": "8.11.0", "versionType": "semver"}, {"lessThanOrEqual": "8.10.1", "status": "affected", "version": "8.10.1", "versionType": "semver"}, {"lessThanOrEqual": "8.10.0", "status": "affected", "version": "8.10.0", "versionType": "semver"}, {"lessThanOrEqual": "8.9.1", "status": "affected", "version": "8.9.1", "versionType": "semver"}, {"lessThanOrEqual": "8.9.0", "status": "affected", "version": "8.9.0", "versionType": "semver"}, {"lessThanOrEqual": "8.8.0", "status": "affected", "version": "8.8.0", "versionType": "semver"}, {"lessThanOrEqual": "8.7.1", "status": "affected", "version": "8.7.1", "versionType": "semver"}, {"lessThanOrEqual": "8.7.0", "status": "affected", "version": "8.7.0", "versionType": "semver"}, {"lessThanOrEqual": "8.6.0", "status": "affected", "version": "8.6.0", "versionType": "semver"}, {"lessThanOrEqual": "8.5.0", "status": "affected", "version": "8.5.0", "versionType": "semver"}, {"lessThanOrEqual": "8.4.0", "status": "affected", "version": "8.4.0", "versionType": "semver"}, {"lessThanOrEqual": "8.3.0", "status": "affected", "version": "8.3.0", "versionType": "semver"}, {"lessThanOrEqual": "8.2.1", "status": "affected", "version": "8.2.1", "versionType": "semver"}, {"lessThanOrEqual": "8.2.0", "status": "affected", "version": "8.2.0", "versionType": "semver"}, {"lessThanOrEqual": "8.1.2", "status": "affected", "version": "8.1.2", "versionType": "semver"}, {"lessThanOrEqual": "8.1.1", "status": "affected", "version": "8.1.1", "versionType": "semver"}, {"lessThanOrEqual": "8.1.0", "status": "affected", "version": "8.1.0", "versionType": "semver"}, {"lessThanOrEqual": "8.0.1", "status": "affected", "version": "8.0.1", "versionType": "semver"}, {"lessThanOrEqual": "8.0.0", "status": "affected", "version": "8.0.0", "versionType": "semver"}, {"lessThanOrEqual": "7.88.1", "status": "affected", "version": "7.88.1", "versionType": "semver"}, {"lessThanOrEqual": "7.88.0", "status": "affected", "version": "7.88.0", "versionType": "semver"}, {"lessThanOrEqual": "7.87.0", "status": "affected", "version": "7.87.0", "versionType": "semver"}, {"lessThanOrEqual": "7.86.0", "status": "affected", "version": "7.86.0", "versionType": "semver"}, {"lessThanOrEqual": "7.85.0", "status": "affected", "version": "7.85.0", "versionType": "semver"}, {"lessThanOrEqual": "7.84.0", "status": "affected", "version": "7.84.0", "versionType": "semver"}, {"lessThanOrEqual": "7.83.1", "status": "affected", "version": "7.83.1", "versionType": "semver"}, {"lessThanOrEqual": "7.83.0", "status": "affected", "version": "7.83.0", "versionType": "semver"}, {"lessThanOrEqual": "7.82.0", "status": "affected", "version": "7.82.0", "versionType": "semver"}, {"lessThanOrEqual": "7.81.0", "status": "affected", "version": "7.81.0", "versionType": "semver"}, {"lessThanOrEqual": "7.80.0", "status": "affected", "version": "7.80.0", "versionType": "semver"}, {"lessThanOrEqual": "7.79.1", "status": "affected", "version": "7.79.1", "versionType": "semver"}, {"lessThanOrEqual": "7.79.0", "status": "affected", "version": "7.79.0", "versionType": "semver"}, {"lessThanOrEqual": "7.78.0", "status": "affected", "version": "7.78.0", "versionType": "semver"}, {"lessThanOrEqual": "7.77.0", "status": "affected", "version": "7.77.0", "versionType": "semver"}, {"lessThanOrEqual": "7.76.1", "status": "affected", "version": "7.76.1", "versionType": "semver"}, {"lessThanOrEqual": "7.76.0", "status": "affected", "version": "7.76.0", "versionType": "semver"}, {"lessThanOrEqual": "7.75.0", "status": "affected", "version": "7.75.0", "versionType": "semver"}, {"lessThanOrEqual": "7.74.0", "status": "affected", "version": "7.74.0", "versionType": "semver"}, {"lessThanOrEqual": "7.73.0", "status": "affected", "version": "7.73.0", "versionType": "semver"}, {"lessThanOrEqual": "7.72.0", "status": "affected", "version": "7.72.0", "versionType": "semver"}, {"lessThanOrEqual": "7.71.1", "status": "affected", "version": "7.71.1", "versionType": "semver"}, {"lessThanOrEqual": "7.71.0", "status": "affected", "version": "7.71.0", "versionType": "semver"}]}], "source": "2499f714-1537-4658-8207-48ae4bb9eae9"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup\nfor a given hostname even when using a different Native CA Store setting\n(`CURLSSLOPT_NATIVE_CA`) than when the connection was created."}], "id": "CVE-2026-80231", "lastModified": "2026-09-08T19:19:54.307", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-80231", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-09-08T18:50:09.901920Z", "version": "2.0.3"}}]}, "published": "2026-09-06T18:17:22.500", "references": [{"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "url": "https://curl.se/docs/CVE-2026-80231.html"}, {"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "url": "https://curl.se/docs/CVE-2026-80231.json"}, {"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "url": "https://hackerone.com/reports/3969368"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "url": "https://hackerone.com/reports/3969368"}], "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-488"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}