CURL-CVE-2026-3784

vendorUSosv

wrong proxy connection reuse with credentials

view advisory published 2026-03-11Licence: per source

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-3784US——
curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is…
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan