CVE-2026-92386
ADVISORY - nistSummary
When writing a long cookie name and value to a Netscape cookie jar, a remote
HTTP server can make curl write a record that exceeds its line-length
parsing limit. Consequently, any subsequent curl invocation reading from
that same cookie jar using --cookie silently aborts parsing prematurely upon
encountering the too long line, ignoring all subsequent valid cookies in the
file.
EPSS Score: 0.00828 (0.578)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Improper Validation of Specified Quantity in Input
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-92386
EXPLOITABILITY SCORE
2.2
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
8.1highAlpine
CREATED
UPDATED
ADVISORY IDCVE-2026-92386
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-92386
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-92386
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/Alowminimos
CREATED
UPDATED
ADVISORY ID
MINI-q34g-8cmc-c6c6
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-