Sploitus

CVE-2026-8925

No indexed exploits for CVE-2026-8925 yet

The curl logic that works with SASL authentication could end up cleaning up the GSASL context *twice* without clearing the pointer in between, making it `free()` the same pointer twice.

Affected products
Linuxmint, Curl
Haxx Curl
< 8.21.0
CVSS 3.1
9.8 CRITICAL
EPSS
0.6% (45th percentile)
Weakness
CWE-415
NVD status
Analyzed
Published
2026-07-03
CVE-2026-8925 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2026-8925 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2026-8925 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.