CVE-2026-9546

Description

A vulnerability in libcurl caused the HTTP `Referer:` header to persist even when explicitly cleared. While the documentation states that passing NULL to `CURLOPT_REFERER` suppresses the header, the option failed to clear the internal state. As a result, the previous referrer string was erroneously reused and sent in subsequent requests, potentially leaking sensitive information to unintended servers.

Traduire en français

Produits concernés

• curl
• Haxx curl

Scores CVSS

Faiblesses (CWE)

• CWE-200

Références

• https://curl.se/docs/CVE-2026-9546.html PatchVendor Advisory
• https://curl.se/docs/CVE-2026-9546.json Third Party Advisory
• https://hackerone.com/reports/3754343 ExploitIssue TrackingThird Party Advisory
• https://hackerone.com/reports/3754343 ExploitIssue TrackingThird Party Advisory

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories