CVE-2026-6429

mediumpriority · track · 0EPSS 0.005 · 44 %ileDEEUFRRUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.52% (44th) EPSS

CVSS 5.3 · medium

Is it mine?

191 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

EPSS · scored 2026-10-27

When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.

cvss

Technical severity, 0–10. One row per scoring source.

5.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.15.3mediumAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · FSTEC (BDU) RU

v3.15.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondary · ENISA EU

v3.15.3mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:Nsecondaryexploitability 1.6 · impact 3.6

v3.14.9mediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-200US

affected products (191)

Products and version ranges known to be affected.

Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Splunk Splunk Enterprise< 10.0.9cert_bundDE
Splunk Splunk Enterprise< 10.2.6cert_bundDE
Splunk Splunk Enterprise< 10.4.2cert_bundDE
Splunk Splunk Enterprise< 9.4.14cert_bundDE
Splunk Splunk Splunk Enterprise <10.0.9< 10.0.9cert_bundDE
Splunk Splunk Splunk Enterprise <10.2.6< 10.2.6cert_bundDE
Splunk Splunk Splunk Enterprise <10.4.2< 10.4.2cert_bundDE
Splunk Splunk Splunk Enterprise <9.4.14< 9.4.14cert_bundDE
curl curl≤ 7.53.0 ≤7.53.0enisa_euvdEU
curl curl≤ 7.42.0 ≤7.42.0enisa_euvdEU
curl curl≤ 7.63.0 ≤7.63.0enisa_euvdEU
curl curl≤ 7.21.1 ≤7.21.1enisa_euvdEU
curl curl≤ 7.19.7 ≤7.19.7enisa_euvdEU
curl curl≤ 7.76.0 ≤7.76.0enisa_euvdEU
curl curl≤ 7.70.0 ≤7.70.0enisa_euvdEU
curl curl≤ 7.49.1 ≤7.49.1enisa_euvdEU
curl curl≤ 8.9.1 ≤8.9.1enisa_euvdEU

showing 20 of 191

advisories (6)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-1307cURL: Mehrere SchwachstellenDeutsch2026-04-28csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in cURL ausnutzen, um Sicherheitsvorkehrungen zu umgehen, vertrauliche Informationen offenzulegen oder Daten zu manipulieren.
WID-SEC-W-2026-2929Splunk Splunk Enterprise: Mehrere SchwachstellenDeutsch2026-08-19csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise ausnutzen, um beliebigen Code auszuführen, Berechtigungen zu erweitern, Sicherheitsmaßnahmen zu umgehen, SQL-Injection-, serverseitige Request-Forgery- und Cross-Site-Scripting-Angriffe durchzuführen, sensible Informationen offenzulegen oder zu manipulieren, Denial-of-Service-Zustände auszulösen oder andere, nicht näher spezifizierte Angriffe durchzuführen.
CERTFR-2026-AVI-1351Multiples vulnérabilités dans Oracle MySQLFrançais2026-10-21vendor · certfrFR
CERTFR-2026-AVI-1385Multiples vulnérabilités dans les produits VMwareFrançais2026-10-26vendor · certfrFR
CERTFR-2026-AVI-1390Multiples vulnérabilités dans Tenable Network MonitorFrançais2026-10-27vendor · certfrFR
CURL-CVE-2026-6429netrc credential leak with reused proxy connection2026-04-29vendor · osvUS
When asked to both use a `.netrc` file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certain circumstances.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund certfr osv NVD CVE.org MITRE

published 2026-05-13modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

https://github.com/curl/curl/releasesPatchcnnvd
https://nvd.nist.gov/vuln/detail/CVE-2026-6429 cnnvd
https://curl.se/docs/CVE-2026-6429.html enisa_euvd
https://curl.se/docs/CVE-2026-6429.json enisa_euvd
https://hackerone.com/reports/3677759 enisa_euvd
https://curl.se/docs/CVE-2026-6429.htmlPatchVendor Advisorynvd
https://curl.se/docs/CVE-2026-6429.jsonProductnvd
https://hackerone.com/reports/3677759ExploitIssue TrackingThird Party Advisorynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan