CVEvulnerability

CVE-2026-92387

Published 2026-10-20 Modified 2026-10-22 Official page ↗
Status
Awaiting Analysis
Published
2026-10-20
Last modified
2026-10-22
Assigner
2499f714-1537-4658-8207-48ae4bb9eae9

Description

By permanently omitting the final control-response line, a malicious FTP, IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its configured transfer timeout mechanism, indefinitely blocking all concurrent transfers bound to the same multi-handle.

References