CVE-2026-3805Proof of concept (PoC) published · CISASuited to automated attack · CISA
use after free in SMB connection reuse
CVSS score
7.5
EPSS probability
%1.0
Risk score
0.1
Published
7 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
CVE-2026-3805: Use-After-Free in curl SMB connection reuse - heap info disclosure (★0)
Makefile Go / Python
Similar Vulnerabilities
8.8
8.1
CVE-2021-22901Use after free in N/a Https://github.com/curl/curl
Patch verifiedEPSS %64
7.8
4.3
CVE-2011-3389Vulnerability in N/a
Patch verified Public Exploits:1EPSS %73
8.6
CVE-2024-2398HTTP/2 push headers memory-leak
Patch verifiedEPSS %36
6.5
CVE-2022-32206Resource allocation without limits in N/a Https://github.com/curl/curl
Patch verifiedEPSS %36
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-3805"