CVE-2026-4587 | HybridAuth up to 3.12.2 SSL src/HttpClient/Curl.php curlOptions certificate validation (Issue 1444 / EUVD-2026-14425)

A vulnerability classified as . This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation.

This vulnerability is reported as CVE-2026-4587. The attack can be launched remotely. No exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.