CVE-2026-11564 — Native CA trust persist
libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native…
Published: 2026-07-03 · CVSS: 9.1 · CVSS 3.1
libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. An easy handle that first uses default native CA trust can continue trusting the native platform store after the application switches that same handle to custom CA material for a later transfer.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7