Curl Vulnerabilities

Comprehensive security vulnerability database for Curl products

Last updated: Feb 25, 2026
Total CVEs

1

Critical

0

With Exploits

0

Last 30 Days

0

Severity Distribution

Critical0
0%
High0
0%
Medium1
100%
Low0
0%
DescriptionVendor / ProductExploit Status
CVE-2025-115634.6

This vulnerability allows an attacker to manipulate the wcurl tool into saving files in unintended locations on the user's system, potentially exposing sensitive data or overwriting important files. It occurs when the attacker uses URLs with special encoded characters that trick the tool, and it specifically affects users of the wcurl command line tool.

curlwcurl
Theoretical
about 1 month agoFeb 25, 2026

About Curl Security

This page tracks all publicly disclosed security vulnerabilities (CVEs) affecting Curl products. Our database is updated in real-time from the National Vulnerability Database (NVD) and enriched with exploit information from GitHub and other security research sources.

Each CVE listing includes CVSS severity scores, exploit availability status, AI-powered vulnerability summaries, and links to official patches and security advisories.