cve 2026 3784

CVE-2026-3784 is a disclosed vulnerability in curl and libcurl, the widely used networking tools. The flaw allows an existing HTTP proxy connection established with one set of proxy credentials to be wrongly reused when a subsequent request attempts to use different proxy credentials. This issue, fixed in curl version 8.19.0, was coordinated publicly on March 11, 2026. Discussions on WindowsForum cover the technical details of the vulnerability, its impact on proxy connection handling, and the importance of updating to the patched version. Users and administrators are advised to apply the update promptly to prevent potential credential confusion or unauthorized access via shared proxy connections.