CVE WATCH / VULNERABILITY DETAIL
CVE-2026-92386
UNKNOWNCVSS 0NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
When writing a long cookie name and value to a Netscape cookie jar, a remote HTTP server can make `curl` write a record that exceeds its line-length parsing limit. Consequently, any subsequent `curl` invocation reading from that same cookie jar using `--cookie` silently aborts parsing prematurely up
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog