CURIS INC

Evaluation of Disclosure Controls & Procedures

Our management, with the participation of our chief executive officer and chief financial officer, evaluated the effectiveness of our disclosure controls and procedures (as defined in Rules 13a-15(e) and 15d-15(e) under the Securities Exchange Act) as of September 30, 2026.

Management recognizes that any controls and procedures, no matter how well designed and operated, can provide only reasonable assurance of achieving their objectives and management necessarily applies its judgment in evaluating the cost benefit relationship of possible controls and procedures. Based on the evaluation of our disclosure controls and procedures as of September 30, 2026, our chief executive officer and chief financial officer concluded that, as of such date, our disclosure controls and procedures were effective at the reasonable assurance level.

Changes in Internal Control Over Financial Reporting

There have been no changes in our internal control over financial reporting (as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act) during the three months ended September 30, 2026 that have materially affected, or are reasonably likely to materially affect, our internal control over financial reporting.