Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2016-9594

27
FAUCET Score

CVE-2016-9594 describes a critical vulnerability in curl versions prior to 7.52.1, where an uninitialized random value in a libcurl internal function leads to weak or predictable random number generation. This flaw, rated 8.1 HIGH, allows remote attackers to compromise confidentiality, integrity, and availability with high impact and complexity, without requiring user interaction. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 7.52.1CPE matchmatch criteria
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

6.5MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
2.5
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.67%
Probability of exploitation in next 30 days
EPSS Percentile
84.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0267 is in the 42nd percentile among its peer group of 8,918 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

jitsipatch availablevia llm_extracted
Fixed in: 7.52.0
View patch
sierra_wirelesspatch availablevia llm_extracted
Fixed in: 7.52.0
View patch

Vendor Advisories (3)

redhatCVE-2016-9594Moderate

curl: Unitialized random

Dec 23, 2016
sierra_wirelessllm-sierra_wireless-d82b7e21b6d8a3f7HIGH

uninitialized random

Dec 23, 2016
jitsillm-jitsi-8978ab3fc3b4e532HIGH

uninitialized random

Dec 23, 2016

References

bugzilla.redhat.com / show_bug.cgi
Issue TrackingThird Party Advisory
curl.haxx.se / docs/adv_20161223.html
Vendor Advisory
security.gentoo.org / glsa/201701-47
Third Party Advisory
tenable.com / security/tns-2017-04
Third Party Advisory
securityfocus.com / bid/95094
Third Party AdvisoryVDB Entry
securitytracker.com / id/1037528
Third Party AdvisoryVDB Entry