CVE-2026-8286

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the connection might reuse an existing live connection even though the TLS configuration mismatches so it should not.

• CWE-295

• https://curl.se/docs/CVE-2026-8286.htmlPatch, Vendor Advisory
• https://curl.se/docs/CVE-2026-8286.jsonVendor Advisory
• https://hackerone.com/reports/3718195Exploit, Issue Tracking, Third Party Advisory
• https://hackerone.com/reports/3718195Exploit, Issue Tracking, Third Party Advisory

Published

Jul 3, 2026

Last Modified

Jul 7, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-8276A flaw has been found in bettercap up to 2.41.5. Affected by…3.7
• CVE-2026-8278Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2026-8280GitLab has remediated an issue in GitLab CE/EE affecting all…6.5
• CVE-2026-8281Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-8284URL redirection to untrusted site ('open redirect') vulnerab…6.1
• CVE-2026-8285Improper restriction of excessive authentication attempts vu…4.3
• CVE-2026-8287Allocation of resources without limits or throttling vulnera…4.3
• CVE-2026-8288A vulnerability was determined in Open5GS up to 2.7.7. This …6.5
• CVE-2026-8289A vulnerability was identified in Open5GS up to 2.7.7. This …6.5
• CVE-2026-8290A security flaw has been discovered in Open5GS up to 2.7.7. …6.5
• CVE-2026-8291A weakness has been identified in Open5GS up to 2.7.7. Impac…6.5
• CVE-2026-8292A security vulnerability has been detected in Open5GS up to …6.5