CVE-2026-7009 - Vulnerability Analysis

Overview

curl contains a broken authentication caused by failure to detect OCSP stapling response problems, letting attackers bypass certificate status verification, exploit requires use of Certificate Status Request TLS extension.

Severity & Score

Impact

Attackers can bypass certificate status verification, potentially allowing man-in-the-middle attacks.

Mitigation

Update to the latest version of curl.

References

• https://curl.se/docs/CVE-2026-7009.html
• https://curl.se/docs/CVE-2026-7009.json
• https://hackerone.com/reports/3694390
• http://www.openwall.com/lists/oss-security/2026/04/29/12

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner