CVE-2025-11563: wcurl path traversal with percent-encoded slashes

Overview

Severity

Medium (CVSS 4.6)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Exploit Status

Not Exploited

Patch Tuesday

2026-Feb

Released

2026-02-26

EPSS Score

0.01% (percentile: 0.6%)

Affected Products (4)

Other

• 20919-17084
• 20920-17086

Open Source Software

• azl3 rust 1.90.0-3 on Azure Linux 3.0
• azl3 rust 1.75.0-24 on Azure Linux 3.0

Revision History

• 2026-02-26: Information published.