https://seclists.org/oss-sec/2026/q2/267: [ADVISORY] curl: CVE-2026-5773: wrong use of SMB connection
Published Apr 29, 2026
·Updated
Affected Software
2 affected components
curl libcurl>=7.40.0<=8.19.0
curl curl>=7.40.0<=8.19.0
Frequently Asked Questions
1
What is the severity of CVE-2026-5773?
CVE-2026-5773 is classified as a medium severity vulnerability due to the potential for incorrect SMB connection reuse.
2
How do I fix CVE-2026-5773?
To fix CVE-2026-5773, update libcurl to the latest version that addresses this connection reuse issue.
3
What impact does CVE-2026-5773 have on SMB transfers?
CVE-2026-5773 can lead to the wrong connection being reused for SMB(S) transfers, potentially exposing sensitive data.
4
Which versions of curl are affected by CVE-2026-5773?
CVE-2026-5773 affects certain versions of curl that utilize libcurl for SMB(S) transfers.
5
Is CVE-2026-5773 a critical vulnerability?
CVE-2026-5773 is not considered a critical vulnerability but can pose risks depending on the specific usage of SMB(S) in applications.