Post #43292 36 Oct 14, 2026, 08:46 UTC Curl - A UAF turned RCEhttps://daniel.haxx.se/blog/2026/10/14/a-uaf-turned-rce/https://redd.it/1x5lh6e@r_linux daniel.haxx.se A UAF turned RCE In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free. This post explains the bug, what the problem can…