Logo
vulnerabilityCVE-2026-4873
Name
CVE-2026-4873
Source
NVD ( link)Debian ( link)
Description
A vulnerability exists where a connection requiring TLS incorrectly reuses an existing unencrypted connection from the same connection pool. If an initial transfer is made in clear-text (via IMAP, SMTP, or POP3), a subsequent request to that same host bypasses the TLS requirement and instead transmit data unencrypted.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
curl
Exploitable

Vulnerability Ratings#


5.9
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
2025.02.x
8.20.0
Not Affected
buildroot
master
8.21.0
Not Affected
openwrt
master
8.19.0-r2
Exploitable
openwrt
master
8.20.0-r1
Not Affected
openwrt
openwrt-25.12
8.19.0-r2
Exploitable
openwrt
openwrt-25.12
8.14.1-r1
Exploitable
yocto
master
8.20.0
Not Affected
yocto
scarthgap
8.7.1
Exploitable