CVE WATCH / VULNERABILITY DETAIL
CVE-2026-92388
UNKNOWNCVSS 0NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
When an FTP wildcard `LIST` operation fails, libcurl omits the restoration path meant for successful listings, leaving the write callback set to the internal listing parser and the write callback data pointing directly to the easy handle. Subsequent reuse of this handle triggers an immediate crash,
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog