CVE-2019-5443

A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can do anything it wants.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-25)

CWEs

CWE-427, CWE-94

Published

2019-07-02

Modified

2026-10-14

Record from

the NVD, synced 2026-10-19

Affected

• haxx:curl
• netapp:oncommand_insight
• netapp:oncommand_unified_manager
• netapp:oncommand_workflow_automation
• netapp:snapcenter
• oracle:enterprise_manager_ops_center
• oracle:http_server
• oracle:mysql_server
• oracle:oss_support_tools

References

• http://www.openwall.com/lists/oss-security/2019/06/24/1
• http://www.securityfocus.com/bid/108881
• https://curl.haxx.se/docs/CVE-2019-5443.html
• https://security.netapp.com/advisory/ntap-20191017-0002/
• https://www.oracle.com/security-alerts/cpuapr2020.html

Check your stackJSON