CVE-2026-92386
NONE—CVSS v3
—CVSS v2
0.29%
EPSS (exploit probability)
—CWE
Description
When writing a long cookie name and value to a Netscape cookie jar, a remote
HTTP server can make `curl` write a record that exceeds its line-length
parsing limit. Consequently, any subsequent `curl` invocation reading from
that same cookie jar using `--cookie` silently aborts parsing prematurely upon
encountering the too long line, ignoring all subsequent valid cookies in the
file.
Affected routers (0)
No routers currently mapped to this CVE in our database.