CVE-2026-3805
use after free in SMB connection reuse
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.
| Vendor | curl |
| Product | curl |
| Published | Mar 11, 2026 |
| Last Updated | Mar 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for curl curl
Be the first to know when new high vulnerabilities affecting curl curl are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
curl / curl
8.18.0 ≤ 8.18.0 8.17.0 ≤ 8.17.0 8.16.0 ≤ 8.16.0 8.15.0 ≤ 8.15.0 8.14.1 ≤ 8.14.1 8.14.0 ≤ 8.14.0 8.13.0 ≤ 8.13.0
References
Credits
Daniel Wade Stefan Eissing