CVE List

CVE-2026-3805

Critical 7.5

When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory.

Published March 11, 2026.

Affected software

Get alerts for Haxx Curl

Reference links