Live monitoring Updated 72-hour alert levelMajor alert Editor: Frédéric LENQUETTE
CYBERIACKCybersecurity & AI intelligence · by Frédéric LENQUETTE

CVE entry · CVE-2026-92392

CVE-2026-92392 — curl patches a high-severity HTTP/2 flaw: update to version 8.23.0

The flaw is hard to exploit, but curl is embedded in many applications, containers and devices that a simple system update won't fix. Here's how to find every copy.

Our analyses

What to do

  1. Check whether your estate includes the affected product, including internet-facing devices.
  2. Apply the vendor’s patch or mitigations (references below).
  3. Watch for exploitation: this entry is updated if the vulnerability enters the exploited catalog or is the subject of a CERT-FR alert.

References