Logo
vulnerabilityCVE-2026-7009
Name
CVE-2026-7009
Source
NVD ( link)Debian ( link)
Description
When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is valid, it fails to detect OCSP problems and instead wrongly consider the response as fine.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
curl
Exploitable

Vulnerability Ratings#


5.3
CVSSv31
5.3
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
8.20.0
Not Affected
buildroot
master
8.21.0
Not Affected
openwrt
openwrt-25.12
8.19.0-r2
Exploitable
openwrt
openwrt-25.12
8.14.1-r1
Not Affected
yocto
kirkstone
7.82.0
Not Affected
yocto
master
8.20.0
Not Affected
yocto
scarthgap
8.7.1
Not Affected