CVE-2016-7141: curl and libcurl before 7.50.2, when built with NSS and the libnsspem.so library is available at runtime, a...

Security readout for executives and security teams

CVE-2016-7141 affects curl/libcurl before 7.50.2 in a specific configuration. A TLS client certificate loaded for one connection could be reused on another connection where no certificate was intended, potentially causing unintended client authentication. Exposure is most likely on older Linux or appliance environments using curl/libcurl before 7.50.2 with the NSS backend and libnsspem.so present, especially where client TLS certificates are used. Treat as a targeted remediation item for systems using client TLS certificates. Broad emergency action is not supported by the provided evidence, but affected legacy configurations can cause serious authentication boundary failure. Mitigation focus: Upgrade curl/libcurl to 7.50.2 or later where feasible.; Apply fixed curl packages from the relevant OS vendor advisory.; Check vendor guidance for supported backported fixes on older distributions..

Prepared

Jun 13, 2026, 13:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.