Unknown · Hybridauth · CVE-2026-4587
**Name of the Vulnerable Software and Affected Versions**
HybridAuth versions up to 3.12.2
**Description**
A flaw exists in HybridAuth related to improper certificate validation within the SSL Handler component. This is due to the manipulation of the `curlOptions` argument in the src/HttpClient/Curl.php file. The issue is remotely exploitable and is considered to have high complexity and difficult exploitability. The project was notified of the issue but has not yet responded.
**Recommendations**
Update HybridAuth to a version beyond 3.12.2.