CVE-2026-4587 | HybridAuth up to 3.12.2 SSL src/HttpClient/Curl.php curlOptions certificate validation (Issue 1444)

A vulnerability classified as problematic was found in HybridAuth up to 3.12.2. This issue affects some unknown processing of the file src/HttpClient/Curl.php of the component SSL Handler. The manipulation of the argument curlOptions results in improper certificate validation.

This vulnerability is reported as CVE-2026-4587. The attack can be launched remotely. No exploit exists.

The project was informed of the problem early through an issue report but has not responded yet.