CURL-CVE-2026-9079

vendorUSosv

stale proxy password leak

view advisory published 2026-06-24Licence: per source

libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-9079US——
libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers t…
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan