
CVE-2026-82208 With the wolfSSL backend, when CA caching is enabled and an `CURLOPT_SSL_CTX_FUNCTION` callback replaces the trust store, libcurl can silently reinstall the cached st… https://www.cve.org/CVERecord?id=CVE-2026-82208
Post summary
CVE‑2026‑82208 details a bug in libcurl’s wolfSSL backend where a callback can silently reinstall a cached trust store, potentially undermining SSL validation. No proof of exploitation or patch has been noted yet.

