cve-2026-7168

CVE-2026-7168 is a medium-severity libcurl vulnerability disclosed by the curl project on April 29, 2026. It affects applications that reuse a libcurl handle across two different HTTP proxies, potentially leaking a Digest Proxy-Authorization header from the first proxy to the second. This is not a Windows remote-code-execution emergency and does not affect the curl command-line tool in typical usage. However, it matters for Windows administrators because curl is part of the platform's plumbing and libcurl is often embedded in applications. The focus is on inventory, proxy hygiene, and applying the fix rather than panic.