haxx
Security Risk Profile
46
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 201 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 21, 2005 to present
201
Total CVEs
111
Critical+High
0
Exploited
13
Unpatched
Threat Assessment
Avg CVSS
7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
13
Critical/High
Risk Level
46/100
medium
📈 18 in Last 30 Days
Severity Distribution
Critical
43High
68Medium
79Low
11Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
27Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
36
2
Input Validation
31
3
Infoleak
19
4
Use After Free
15
5
Integer Overflow
12
Most Affected Products
1. haxx libcurl968
2. haxx curl835
3. Splunk Universal Forwarder147
4. Canonical Ubuntu Linux116
5. redhat/curl115
Recent Vulnerabilities
See more →CVE-2026-9547
CVSS 7.4EPSS 0%high
SSH improper host validation
7/3/2026
CVE-2026-9546
CVSS 7.5EPSS 0%high
sending old referer
7/3/2026
CVE-2026-9545
CVSS 7.5EPSS 0%high
exposing HTTP/3 early data
7/3/2026
CVE-2026-9080
CVSS 7.3EPSS 0%high
UAF after pause in socket callback
7/3/2026
CVE-2026-9079
CVSS 9.8EPSS 1%critical
stale proxy password leak
7/3/2026
CVE-2026-8932
CVSS 7.5EPSS 0%high
incomplete mTLS config matching in conn reuse
7/3/2026
CVE-2026-8927
CVSS 9.1EPSS 0%critical
env-set cross-proxy Digest auth state leak
7/3/2026
CVE-2026-8926
CVSS 9.1EPSS 0%critical
password leak with netrc and user in URL
7/3/2026
CVE-2026-8925
CVSS 9.8EPSS 1%critical
SASL double-free
7/3/2026
CVE-2026-8924
CVSS 9.1EPSS 1%critical
trailing dot domain super cookie
7/3/2026
Monitor haxx in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.