cve 2026 8368

Microsoft’s Security Update Guide now tracks CVE-2026-8368, a credential-disclosure flaw in Perl’s LWP::UserAgent before version 6.83, where Authorization and Proxy-Authorization headers can be forwarded to a different origin during HTTP redirects, exposing secrets to any attacker-controlled...