CVE-2026-18924

A flaw in libcurl's handling of HTTP/2 Server Push streams, when the parent handle is set to share connections with other handles, can lead to use-after-free in the cleanup process.

• CWE-416
• CWE-416

• https://curl.se/docs/CVE-2026-18924.htmlPatch, Vendor Advisory
• https://curl.se/docs/CVE-2026-18924.jsonVendor Advisory
• https://hackerone.com/reports/3916059Exploit, Mitigation, Third Party Advisory
• https://hackerone.com/reports/3916059Exploit, Mitigation, Third Party Advisory

Published

Sep 6, 2026

Last Modified

Sep 15, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-18915Invocation of process using visible sensitive information vu…5
• CVE-2026-18916Any remote client can crash a NSD serve child, by throttling…7.5
• CVE-2026-18917A flaw was found in libvirt. An unprivileged local user coul…7.8
• CVE-2026-18918In Eclipse Lyo versions 2.0.0 to 7.0.0, OAuth server authori…9.1
• CVE-2026-1892A security vulnerability has been detected in WeKan up to 8.…5
• CVE-2026-18922A flaw was found in 389 Directory Server. During SASL PLAIN …9.8
• CVE-2026-18927A vulnerability was determined in imranrisal-dev Student-Man…6.3
• CVE-2026-18929Carbone is vulnerable to Denial of Service due to lack of pr…6.9
• CVE-2026-1893The Orbisius Random Name Generator plugin for WordPress is v…6.4
• CVE-2026-18931Use of Hard-coded Credentials vulnerability in TMT Machine I…9.1
• CVE-2026-18932Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-18933The wp-downloadmanager WordPress plugin, in version 1.68.11 …7.2