CVE-2026-7009 — OCSP stapling bypass with Apple SecTrust
When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is valid, it fails to detect O…
Published: 2026-05-13 · CVSS: 5.3 · CVSS 3.1
When curl is told to use the Certificate Status Request TLS extension, often referred to as *OCSP stapling*, to verify that the server certificate is valid, it fails to detect OCSP problems and instead wrongly consider the response as fine.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7