Aria2 Project

2 CVEs in 2 Aria2 Project products, including Aria2, Aria2c. Newest: CVE-2026-8367 (2026-05-13). Severity, EPSS and public exploits for each.

Aria2 Project products with known CVEs

ProductCVEs
Aria22
Aria2c1
Aria2 Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-8367Medium4.82026-05-13aria2c accepts a server certificate with incorrect Extended Key Usage (EKU). If the attackers compromise a certificate (with the associated private key) issued…
CVE-2019-3500High7.82019-01-02aria2c in aria2 1.33.1, when --log is used, can store an HTTP Basic Authentication username and password in a file, which might allow local users to obtain sen…