CVE-2026-92387
NONE—CVSS v3
—CVSS v2
0.31%
EPSS (exploit probability)
—CWE
Description
By permanently omitting the final control-response line, a malicious FTP,
IMAP, POP3, or SMTP server can exploit libcurl and completely bypass its
configured transfer timeout mechanism, indefinitely blocking all concurrent
transfers bound to the same multi-handle.
Affected routers (0)
No routers currently mapped to this CVE in our database.