CVE-2026-8286

Description

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.

References

• https://curl.se/docs/CVE-2026-8286.html
• https://curl.se/docs/CVE-2026-8286.json
• https://hackerone.com/reports/3718195