CVE-2026-9079
Moderate
stale proxy password leak
libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.
Exploit probability
1.1%
Published
June 24, 2026
Required by
Not available
Last source change
June 24, 2026
02 / AFFECTED SOFTWARE
Affected packages
30 explicit affected versions
45 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2026-9079
View original source
Open Source Vulnerabilities
CURL-CVE-2026-9079
View original source
05 / REFERENCES