CVE-2026-9079

9.8 Critique

Publiée le 03/07/2026 à 09:16 · Modifiée le 15/09/2026 à 09:16 · Modifiée · Source : 2499f714-1537-4658-8207-48ae4bb9eae9

Description

libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.

Traduire en français

Produits concernés

curl
Haxx curl

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-522

Références

https://curl.se/docs/CVE-2026-9079.html PatchVendor Advisory
https://curl.se/docs/CVE-2026-9079.json Vendor Advisory
https://hackerone.com/reports/3750295 ExploitIssue TrackingThird Party Advisory
https://hackerone.com/reports/3750295 ExploitIssue TrackingThird Party Advisory

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories