Kritik CVSS 9.1
CVE-2026-86411: CVE-2026-86411: güvenlik açığı
Açıklama (NVD)
An `ftp://` transfer configured with `CURLUSESSL_NONE` can reuse a pooled FTP control connection that a previous easy handle upgraded with `STARTTLS` and authenticated using a client certificate. The second handle performs neither a new TLS handshake nor a new FTP login, so the server continues to authorize it under the first handle's certificate identity.
Özet bilgiler
- CVSS v3.1
- 9.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - EPSS
- %0,43 (yüzdelik 38)
- CWE
- CWE-488
- Yama
- Yok / bilinmiyor