CVE-2026-107928
NONE—CVSS v3
—CVSS v2
0.26%
EPSS (exploit probability)
—CWE
Description
When curl is built with GnuTLS, a malicious WebSocket server can make curl
send memory past its send buffer. This is due to an out of bounds read
following when `gnutls_record_send()` returns a number of bytes sent **greater
than the number of bytes it was given to send**. GnuTLS does that after a
blocked send.
Affected routers (0)
No routers currently mapped to this CVE in our database.