Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2024-9681

22
FAUCET Score

CVE-2024-9681 is a medium-severity vulnerability affecting haxx curl, where an HSTS subdomain expiry time can incorrectly overwrite a parent domain's entry in the HSTS cache. This can lead to curl converting HTTP requests to HTTPS for an unintended duration, potentially causing service disruptions or premature reversion to insecure HTTP. With a CVSS score of 6.5, this bug has a high impact on integrity and a low impact on availability, requiring high attack complexity and no user interaction. There is currently no known active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has garnered some community discussion and media coverage, including a mention in CISA alerts regarding Siemens SINEC OS.

Impacted Technologies

VendorProductVersion(s)CPE
>= 7.74.0, < 8.11.0CPE matchmatch criteria
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
>= 7.74.0, <= 7.74.0CPE match
cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*
>= 7.75.0, <= 7.75.0CPE match
cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*
>= 7.76.0, <= 7.76.0CPE match
cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*
>= 7.76.1, <= 7.76.1CPE match
cpe:2.3:a:curl:curl:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.5MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
LOW
Exploitability Score
2.2
Impact Score
4.2
CvssVersion
3.1

Exploit Intelligence

EPSS Score
2.03%
Probability of exploitation in next 30 days
EPSS Percentile
79.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0203 is in the 64th percentile among its peer group of 19,958 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (38)

9001patch availablevia llm_extracted
View patch
gatsbyjspatch availablevia llm_extracted
View patch
hikvisionpatch availablevia llm_extracted
joinmastodonpatch availablevia llm_extracted
View patch
mariadbpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: 17187-16823Fixed in: 8.8.0-5
microsoftpatch availablevia msrc
Product: 19799-17086Fixed in: 8.8.0-5
microsoftpatch availablevia msrc
Product: 17183-16823Fixed in: 1.72.0-10
microsoftpatch availablevia msrc
Product: 19721-17086Fixed in: 1.72.0-10
microsoftpatch availablevia msrc
Product: 17183-17086Fixed in: 1.72.0-10
microsoftpatch availablevia msrc
Product: 17541-17084Fixed in: 2.16.1-7
microsoftpatch availablevia msrc
Product: 17577-17084Fixed in: 8.0.40-5
microsoftpatch availablevia msrc
Product: 19257-17084Fixed in: 8.0.40-5
microsoftpatch availablevia msrc
Product: 17578-17084Fixed in: 3.30.3-4
microsoftpatch availablevia msrc
Product: 17464-17084Fixed in: 3.30.3-4
microsoftpatch availablevia msrc
Product: 17579-17084Fixed in: 8.8.0-4
microsoftpatch availablevia msrc
Product: 17184-16823Fixed in: 8.0.40-3
microsoftpatch availablevia msrc
Product: 19825-17086Fixed in: 8.0.40-3
microsoftpatch availablevia msrc
Product: 17185-16823Fixed in: 3.21.4-16
microsoftpatch availablevia msrc
Product: 17098-17086Fixed in: 3.21.4-16
microsoftpatch availablevia msrc
Product: 19756-17086Fixed in: 3.21.4-16
microsoftpatch availablevia msrc
Product: azl3 mysql 8.0.40-6 on Azure Linux 3.0Fixed in: 8.0.40-5
microsoftpatch availablevia msrc
Product: azl3 cmake 3.30.3-4 on Azure Linux 3.0Fixed in: 3.30.3-4
microsoftpatch availablevia msrc
Product: azl3 cmake 3.30.3-6 on Azure Linux 3.0Fixed in: 3.30.3-4
microsoftpatch availablevia msrc
Product: azl3 curl 8.8.0-4 on Azure Linux 3.0Fixed in: 8.8.0-4
microsoftpatch availablevia msrc
Product: cbl2 rust 1.72.0-10 on CBL Mariner 2.0Fixed in: 1.72.0-10
microsoftpatch availablevia msrc
Product: cbl2 mysql 8.0.40-3 on CBL Mariner 2.0Fixed in: 8.0.40-3
microsoftpatch availablevia msrc
Product: cbl2 mysql 8.0.40-4 on CBL Mariner 2.0Fixed in: 8.0.40-3
microsoftpatch availablevia msrc
Product: cbl2 cmake 3.21.4-16 on CBL Mariner 2.0Fixed in: 3.21.4-16
microsoftpatch availablevia msrc
Product: cbl2 cmake 3.21.4-17 on CBL Mariner 2.0Fixed in: 3.21.4-16
microsoftpatch availablevia msrc
Product: cbl2 curl 8.8.0-5 on CBL Mariner 2.0Fixed in: 8.8.0-5
microsoftpatch availablevia msrc
Product: cbl2 curl 8.8.0-6 on CBL Mariner 2.0Fixed in: 8.8.0-5
microsoftpatch availablevia msrc
Product: azl3 tensorflow 2.16.1-7 on Azure Linux 3.0Fixed in: 2.16.1-7
microsoftpatch availablevia msrc
Product: azl3 mysql 8.0.40-5 on Azure Linux 3.0Fixed in: 8.0.40-5
nodejspatch availablevia llm_extracted
Fixed in: 9.4.3, 9.3.5, 9.2.7, 9.1.10
redhatvendor investigatingvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: rhcos
redhatvendor investigatingvia redhat_api
Product: Red Hat JBoss Core ServicesFixed in: jbcs-httpd24-curl
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: curl

Vendor Advisories (8)

nodejsllm-nodejs-b263506120f02d37CRITICAL

Third-Party Package Updates in Splunk Enterprise - July 2025

Jul 7, 2025
mariadbllm-mariadb-7e20cc2309665f3eCRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
gatsbyjsllm-gatsbyjs-d2a2db116f1afcf5CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
9001llm-9001-fecf0327d92708b9CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
joinmastodonllm-joinmastodon-9b2d3b3c900c6299CRITICAL

HP ThinPro 8.1 SP6 Security Updates

Mar 3, 2025
microsoft2024-Nov/CVE-2024-9681Moderate

HSTS subdomain overwrites parent cache entry

Nov 12, 2024
redhatCVE-2024-9681Low

curl: HSTS subdomain overwrites parent cache entry

Nov 6, 2024
hikvisionllm-hikvision-356baee0f10ead1dLOW

HSTS subdomain overwrites parent cache entry

Nov 5, 2024

References

curl.se / docs/CVE-2024-9681.html
PatchVendor Advisory
curl.se / docs/CVE-2024-9681.json
Vendor Advisory
hackerone.com / reports/2764830
ExploitIssue TrackingPatchThird Party Advisory
seclists.org / fulldisclosure/2025/Apr/10
seclists.org / fulldisclosure/2025/Apr/11
seclists.org / fulldisclosure/2025/Apr/12
seclists.org / fulldisclosure/2025/Apr/13
seclists.org / fulldisclosure/2025/Apr/4
seclists.org / fulldisclosure/2025/Apr/5
seclists.org / fulldisclosure/2025/Apr/8
seclists.org / fulldisclosure/2025/Apr/9
security.netapp.com / advisory/ntap-20241213-0006
openwall.com / lists/oss-security/2024/11/06/2
Mailing ListPatchThird Party Advisory