CVE-2026-5773 - Vulnerability Analysis

Overview

libcurl contains a file misplacement vulnerability caused by a logical error in connection reuse for SMB(S) transfers, letting attackers cause file download or upload to wrong locations, exploit requires same server and credentials.

Severity & Score

Impact

Attackers can cause files to be downloaded or uploaded to incorrect locations, potentially leading to data loss or leakage.

Mitigation

Update to the latest libcurl version with the fix.

References

• https://curl.se/docs/CVE-2026-5773.html
• https://curl.se/docs/CVE-2026-5773.json
• https://hackerone.com/reports/3650689
• http://www.openwall.com/lists/oss-security/2026/04/29/9

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner