CVE-2026-8924

ADVISORY - nist

Summary

A flaw in curl’s cookie parsing logic allows a malicious HTTP server to set "super cookies" that bypass the Public Suffix List check. This enables an attacker-controlled origin to inject cookies that curl subsequently scopes and transmits to unrelated third-party domains.

EPSS Score⁠: 0.00661 (0.499)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-201⁠

Insertion of Sensitive Information Into Sent Data

Impacted images

Advisories

NIST

CREATED

3 months ago

UPDATED

21 days ago

ADVISORY IDCVE-2026-8924⁠

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-201⁠

CVSS SCORE

9.1critical

Alpine

CREATED

3 months ago

UPDATED

4 days ago

ADVISORY IDCVE-2026-8924⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Debian

CREATED

3 months ago

UPDATED

15 days ago

ADVISORY IDCVE-2026-8924⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

3 months ago

UPDATED

13 days ago

ADVISORY IDCVE-2026-8924⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Amazon

CREATED

8 days ago

UPDATED

7 days ago

ADVISORY IDALAS2-2026-3953⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Amazon

CREATED

22 days ago

UPDATED

21 days ago

ADVISORY IDALAS2023-2026-2132⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Rocky

CREATED

14 days ago

UPDATED

14 days ago

ADVISORY IDRLSA-2026:69125⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Oracle

CREATED

13 days ago

UPDATED

13 days ago

ADVISORY IDELSA-2026-69125⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

21 days ago

UPDATED

21 days ago

ADVISORY ID

CGA-6hqp-6c2m-3mjf

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Photon

CREATED

2 months ago

UPDATED

10 days ago

ADVISORY ID

CVE-2026-8924

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

9.1critical

minimos

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY ID

MINI-8c6p-f92m-vjf2

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY ID

MINI-x5mc-fjc6-6vcv

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY