VDB
JLSEC-2026-385
JLSEC-2026-385
PUBLISHED
CVSS 5.5 MEDIUM
An improper authentication vulnerability exists in curl 7.33.0 to and including 7.82.0 which might allow reuse OAUTH2-authenticated connections without properly making sure that the connection was authenticated with the same credentials as set for this transfer. This affects SASL-enabled protocols: SMPTP(S), IMAP(S), POP3(S) and LDAP(S) (openldap only).
Risk Scores
CVSS 2.0
5.5
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Julia | LibCURL_jll | 0 |
| Julia | CURL_jll | 0 |
| Julia | LibCURL_jll | 0 |
| Julia | CURL_jll | 0 |
Timeline
- May 4, 2026 CVE Published
- Jul 18, 2026 CVE Updated
- Aug 8, 2026 Distribution Patch