[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fID7Faq0t9bhJPDJLSRpg47Wtq328RuxIvNVqnDZaLCQ":3},{"article":4,"iocs":35,"watch_terms":40,"solutions":41,"lesson":127},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":27},"36775706-3948-43b4-ad76-8e0bd39c97f9","curl Patches HTTP\u002F2 Upload Flaw After PoC Demonstrates Client-Side Code Execution","curl-patches-http-2-upload-flaw-after-poc-demonstrates-client-side-code-executio-05d981","A flaw in how curl handles HTTP\u002F2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact knowledge of its build and memory layout, and curl expects a real attack to end in a crash","A critical use-after-free vulnerability (CVE-2026-92392) in curl and libcurl's HTTP\u002F2 upload handling allows a malicious server to corrupt client memory, potentially leading to code execution. The curl project released version 8.23.0 to fix the flaw, which affects versions 8.12.0 through 8.22.0. While exploitation requires specific conditions and knowledge of the client's build, users are advised to upgrade or disable HTTP\u002F2 if unable to patch immediately.","curl patches HTTP\u002F2 upload flaw enabling client-side code execution.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Fcurl-patches-http2-upload-flaw-after.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEj4S_5rQ2kApGYmSMOh6PFsgD3yRugV3_nzSexwBhEe3BoSTQeBfSu2-3JSO4wDCnU2LmVMWtgA6AcBEcf2wOpsL2v22woZ5fel0XaSonlbgDWSXMuV3iu5ewohp9kqgf4OwmCvtnRyyYjFEP6Z3RRLT5sX8g7-xI1robnLmWtqFp6SvrGvpBeXI_D4ICo\u002Fs1600\u002Fcurl.jpg","2026-10-14T12:13:36+00:00","2026-10-14T14:00:09.919683+00:00",8,[17,20],{"name":18,"type":19},"curl","product",{"name":21,"type":19},"libcurl","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":22,"icon":24,"name":25,"slug":26},null,"Vulnerabilities","vulnerabilities",[28,30],{"category":29},{"id":22,"icon":24,"name":25,"slug":26},{"category":31},{"id":32,"icon":24,"name":33,"slug":34},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[36],{"type":37,"value":38,"context":39},"cve","CVE-2026-92392","HTTP\u002F2 upload vulnerability in curl",[18,21],{"controls":42,"vendors":126},[43,72,97],{"slug":44,"name":45,"problem":46,"products":47},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[48,56,64],{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":73,"name":74,"problem":75,"products":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":73,"product_name":94,"url":95,"description":96},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":98,"name":99,"problem":100,"products":101},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[102,110,118],{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",[],{"slug":128,"title":129,"body":130,"framework_refs":131,"framework_notes":142},"curl-http2-use-after-free-flaw-enables-client-side-code-execution","curl HTTP\u002F2 Use-After-Free Flaw Enables Client-Side Code Execution","A use-after-free vulnerability in curl and libcurl's HTTP\u002F2 upload handling (CVE-2026-92392) allows a malicious server to corrupt client memory and potentially execute arbitrary code on the connecting client. The flaw affects a specific range of curl versions (8.12.0–8.22.0), meaning organizations that do not actively track their open-source library versions are silently exposed. This matters because curl and libcurl are embedded in an enormous number of applications, scripts, and devices, making the blast radius of an unpatched vulnerability exceptionally wide. The availability of a public proof-of-concept dramatically lowers the bar for exploitation, compressing the window between disclosure and active attacks.",[132,133,134,135,136,137,138,139,140,141],"CIS Control 2 – Inventory and Control of Software Assets","CIS Control 7 – Continuous Vulnerability Management","NIST SP 800-53 SI-2 (Flaw Remediation)","NIST SP 800-53 SA-11 (Developer Security Testing and Evaluation)","NIST SP 800-161 (C-SCRM – Software Bill of Materials)","NIST CSF ID.AM-2 (Software Inventory)","NIST CSF RS.MI-3 (Vulnerability Mitigation)","OWASP Dependency-Check","ITIL Change Management – Emergency Change Procedure","GDPR Article 32 – Security of Processing (obligation to patch known vulnerabilities)",{}]