Trendmast

Technology news, aggregated

ad slot · header banner 728×90
Cyber Security

curl Patches HTTP/2 Upload Flaw After PoC Demonstrates Client-Side Code Execution

Image: The Hacker News

ad slot · in-content video 16:9

Coverage

More coverage

  • The Hacker News · October 14, 2026 12:13
    A flaw in how curl handles HTTP/2 uploads lets a malicious server receiving an upload corrupt the client's memory, and the researcher who reported it turned that into code execution on the uploading machine. The curl project fixed it on October 14 in curl 8.23.0. Taking over a client needs exact…