CVE-2022-27782

unknowncovered by 1 sourcefirst seen 2026-06-24

Multiple vulnerabilities have been discovered in cURL and libcurl. Some of them allow an attacker to cause remote denial of service, a breach of data confidentiality, and a security policy bypass.

CSIRTS triage

What: Multiple vulnerabilities allow for denial of service, data confidentiality breaches, and security policy bypass.
Who is affected: Users of cURL and libcurl.
Urgency: Remediation is important as vulnerabilities could lead to significant security issues.
Action: Upgrade to the latest versions of cURL and libcurl.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch CVE-2022-27782

Get an email if CVE-2022-27782 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.

Exploitation outlook

Moderate exploitation risk2.6% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 84% of all EPSS-scored CVEs.

Advisory coverage (1)

unknownMultiple vulnerabilities in cURL and libcurl (June 24, 2026)cert-fr-avis · 2026-06-24

External references

NVD record for CVE-2022-27782

CVE.org record

Embed the live status

— this badge updates automatically when the KEV or exploit status changes. How to embed it →

[![CVE-2022-27782 status](https://www.csirts.com/badge/CVE-2022-27782)](https://www.csirts.com/cve/CVE-2022-27782)