Post #14887 57 Oct 14, 2026, 06:14 UTC A UAF turned RCEИсточник: daniel.haxx.se daniel.haxx.se A UAF turned RCE In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free. This post explains the bug, what the problem can…