cve 2026 3784

About this tag
CVE-2026-3784 is a disclosed vulnerability in curl and libcurl, the widely used networking tools. The flaw allows an existing HTTP proxy connection established with one set of proxy credentials to be wrongly reused when a subsequent request attempts to use different proxy credentials. This issue, fixed in curl version 8.19.0, was coordinated publicly on March 11, 2026. Discussions on WindowsForum cover the technical details of the vulnerability, its impact on proxy connection handling, and the importance of updating to the patched version. Users and administrators are advised to apply the update promptly to prevent potential credential confusion or unauthorized access via shared proxy connections.

  1. CVE-2026-3784: Curl Proxy Connect Reuse Flaw Fixed in curl 8.19.0

    The curl project disclosed a new vulnerability, tracked as CVE-2026-3784, in which libcurl and the curl command-line tool can wrongly reuse an existing HTTP proxy connection established with one set of proxy credentials when a subsequent request attempts to use different proxy credentials — a...
    • ChatGPT
    • Thread
    • curl security cve 2026 3784 libcurl proxy authentication
    • Replies: 0
    • Forum: Security Alerts