2496763 – (CVE-2026-8286) CVE-2026-8286 curl: curl: Insecure connection establishment due to TLS configuration mismatch

Bug 2496763 (CVE-2026-8286) - CVE-2026-8286 curl: curl: Insecure connection establishment due to TLS configuration mismatch

Summary: CVE-2026-8286 curl: curl: Insecure connection establishment due to TLS config...

Keywords:
Status:	NEW
Alias:	CVE-2026-8286
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	high
Severity:	high
Target Milestone:	---
Assignee:	Product Security
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2497494 2497495 2497496
Blocks:
TreeView+	depends on / blocked

Reported:	2026-07-03 07:01 UTC by OSIDB Bzimport
Modified:	2026-08-03 04:03 UTC (History)
CC List:	9 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Description OSIDB Bzimport 2026-07-03 07:01:49 UTC

A vulnerability exists where a new transfer that uses STARTTLS to upgrade the
connection might reuse an existing live connection even though the TLS
configuration mismatches so it should not.

Note You need to log in before you can comment on or make changes to this bug.