Aisle Discovers 6 New CVEs in Curl, Including the Oldest Issue Ever Reported

Security researchers at AISLE discovered 6 new CVEs in curl, leading the field with the most findings among AI-powered security organizations during a coordinated disclosure initiative that resulted in 18 total CVEs for curl's June 2026 release. One of the discovered vulnerabilities, CVE-2026-8932, is the oldest curl security issue ever reported at over 25 years old, originating from curl version 7.7 released in March 2001. The vulnerabilities range from memory safety issues to logic bugs affecting credential handling and connection reuse, with AISLE urging users to update to curl 8.21.0 immediately.