Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-9080

Calling `curl_easy_pause()` within the event-based `CURLMOPT_SOCKETFUNCTION` callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 32.7%
CVSS Severity
CVSS v3 Score 7.3
Products affected by CVE-2026-9080
  • Haxx » Curl » Version: 8.13.0
    cpe:2.3:a:haxx:curl:8.13.0
  • Haxx » Curl » Version: 8.14.0
    cpe:2.3:a:haxx:curl:8.14.0
  • Haxx » Curl » Version: 8.14.1
    cpe:2.3:a:haxx:curl:8.14.1
  • Haxx » Curl » Version: 8.15.0
    cpe:2.3:a:haxx:curl:8.15.0
  • Haxx » Curl » Version: 8.16.0
    cpe:2.3:a:haxx:curl:8.16.0
  • Haxx » Curl » Version: 8.17.0
    cpe:2.3:a:haxx:curl:8.17.0
  • Haxx » Curl » Version: 8.18.0
    cpe:2.3:a:haxx:curl:8.18.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved