Security October 2026 Latest record TFTP direction confusion Recorded 6 Nov 2026 at 17:32 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record .
What it said
CVE CVE-2026-92389
Severity Moderate
CVSS base score 5.9
CVSS vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Impact Not stated
Exploitation detected Unknown: not stated by MSRC
Publicly disclosed Unknown: not stated by MSRC
Exploitability Not assessed
Component Mariner
Weakness Not stated
Issued by curl
Customer action Required: follow the MSRC remediation guidance
Affected products azl3 curl 8.11.1-12 on Azure Linux 3.0
Updates that fix it No KB listed
CISA KEV Not listed in the collected catalog
EPSS No EPSS score collected
Public detection template No Nuclei template listed
Published 23 Oct 2026 01:06 UTC
Last revised 4 Nov 2026 14:44 UTC
Revision note Information published.
Source evidence when recorded
Microsoft security releases Complete at observationRead 6 Nov 2026 at 17:30 UTC
CISA KEV Complete at observationRead 6 Nov 2026 at 17:30 UTC
FIRST EPSS Complete at observationRead 6 Nov 2026 at 17:30 UTC
Public detection templates (Nuclei) Complete at observationRead 6 Nov 2026 at 17:30 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
6 Nov 2026 · 17:32:22 UTC Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
6 Nov 2026 · 16:31:02 UTC Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.
Cite this version Field-level log (8)
Up to 100 recent field edits are shown; older edits may be outside retention.
6 Nov 2026 · 17:32:22 UTC
Public detection template Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed 6 Nov 2026 · 17:32:22 UTC
Source coverage: public-exploit-code Incomplete → Current 6 Nov 2026 · 17:32:22 UTC
Source coverage: first-epss Incomplete → Current 6 Nov 2026 · 17:32:22 UTC
Source coverage: msrc-cvrf Incomplete → Current 6 Nov 2026 · 16:31:02 UTC
Public detection template No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained 6 Nov 2026 · 16:31:02 UTC
Source coverage: public-exploit-code Current → Incomplete 6 Nov 2026 · 16:31:02 UTC
Source coverage: first-epss Current → Incomplete 6 Nov 2026 · 16:31:02 UTC
Source coverage: msrc-cvrf Current → Incomplete