CVE-2026-82208
NONE—CVSS v3
—CVSS v2
0.13%
EPSS (exploit probability)
—CWE
Description
With the wolfSSL backend, when CA caching is enabled and an
`CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can
silently reinstall the cached store after the callback returns. A certificate
trusted by the cached store but rejected by the callback-selected store is
then incorrectly accepted.
Affected routers (0)
No routers currently mapped to this CVE in our database.