Vulnerability-Lookup

CVE-2026-9079 (GCVE-0-2026-9079)

Vulnerability from cvelistv5 – Published: 2026-07-03 06:16 – Updated: 2026-09-15 06:03

Title

stale proxy password leak

Summary

libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-06 16:49 UTC

CWE

CWE-522 - Insufficiently Protected Credentials

Assigner

curl redhat root

References

3 references

URL	Tags
https://curl.se/docs/CVE-2026-9079.json
https://curl.se/docs/CVE-2026-9079.html
https://hackerone.com/reports/3750295

Impacted products

3 products

Vendor	Product	Version	CPE status
curl	curl	Affected: 8.8.0 , < 8.14.2 (semver) Affected: 8.15.0 , < 8.16.1 (semver) Affected: 8.17.0 , < 8.20.1 (semver)	guessed
curl	curl	Affected: d5e83eb745762f48d8fafadc5df5dd3ae8d8941e , < 88c7e16cceec816a2df45c899d49b1e85513f193 (git)	guessed
curl	curl	Affected: 8.20.0 Affected: 8.19.0 Affected: 8.18.0 Affected: 8.17.0 Affected: 8.16.0 Affected: 8.15.0 Affected: 8.14.1 Affected: 8.14.0 Affected: 8.13.0 Affected: 8.12.1 Affected: 8.12.0 Affected: 8.11.1 Affected: 8.11.0 Affected: 8.10.1 Affected: 8.10.0 Affected: 8.9.1 Affected: 8.9.0 Affected: 8.8.0	guessed

Credits

Guannan Wang Zhanpeng Liu Jiashuo Liang Guancheng Li Daniel Stenberg

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-9079",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-06T16:49:15.639683Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-06T16:49:56.248Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://hackerone.com/reports/3750295"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThan": "8.14.2",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.16.1",
              "status": "affected",
              "version": "8.15.0",
              "versionType": "semver"
            },
            {
              "lessThan": "8.20.1",
              "status": "affected",
              "version": "8.17.0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "repo": "https://github.com/curl/curl.git",
          "vendor": "curl",
          "versions": [
            {
              "lessThan": "88c7e16cceec816a2df45c899d49b1e85513f193",
              "status": "affected",
              "version": "d5e83eb745762f48d8fafadc5df5dd3ae8d8941e",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "status": "affected",
              "version": "8.20.0"
            },
            {
              "status": "affected",
              "version": "8.19.0"
            },
            {
              "status": "affected",
              "version": "8.18.0"
            },
            {
              "status": "affected",
              "version": "8.17.0"
            },
            {
              "status": "affected",
              "version": "8.16.0"
            },
            {
              "status": "affected",
              "version": "8.15.0"
            },
            {
              "status": "affected",
              "version": "8.14.1"
            },
            {
              "status": "affected",
              "version": "8.14.0"
            },
            {
              "status": "affected",
              "version": "8.13.0"
            },
            {
              "status": "affected",
              "version": "8.12.1"
            },
            {
              "status": "affected",
              "version": "8.12.0"
            },
            {
              "status": "affected",
              "version": "8.11.1"
            },
            {
              "status": "affected",
              "version": "8.11.0"
            },
            {
              "status": "affected",
              "version": "8.10.1"
            },
            {
              "status": "affected",
              "version": "8.10.0"
            },
            {
              "status": "affected",
              "version": "8.9.1"
            },
            {
              "status": "affected",
              "version": "8.9.0"
            },
            {
              "status": "affected",
              "version": "8.8.0"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Guannan Wang"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Zhanpeng Liu"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Jiashuo Liang"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Guancheng Li"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Stenberg"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "libcurl had a flaw that when instructed to clear proxy authentication\ncredentials which made it not do so, leaving the old credentials around to get\nused for subsequent transfers that should not know nor use them."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-522",
              "description": "Insufficiently Protected Credentials",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-15T06:03:28.741Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "url": "https://curl.se/docs/CVE-2026-9079.json"
        },
        {
          "url": "https://curl.se/docs/CVE-2026-9079.html"
        },
        {
          "url": "https://hackerone.com/reports/3750295"
        }
      ],
      "title": "stale proxy password leak",
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_osv": {
        "affected": [
          {
            "ranges": [
              {
                "events": [
                  {
                    "introduced": "8.8.0"
                  },
                  {
                    "fixed": "8.14.2"
                  },
                  {
                    "introduced": "8.15.0"
                  },
                  {
                    "fixed": "8.16.1"
                  },
                  {
                    "introduced": "8.17.0"
                  },
                  {
                    "fixed": "8.20.1"
                  }
                ],
                "type": "SEMVER"
              },
              {
                "events": [
                  {
                    "introduced": "d5e83eb745762f48d8fafadc5df5dd3ae8d8941e"
                  },
                  {
                    "fixed": "88c7e16cceec816a2df45c899d49b1e85513f193"
                  }
                ],
                "repo": "https://github.com/curl/curl.git",
                "type": "GIT"
              }
            ],
            "versions": [
              "8.20.0",
              "8.19.0",
              "8.18.0",
              "8.17.0",
              "8.16.0",
              "8.15.0",
              "8.14.1",
              "8.14.0",
              "8.13.0",
              "8.12.1",
              "8.12.0",
              "8.11.1",
              "8.11.0",
              "8.10.1",
              "8.10.0",
              "8.9.1",
              "8.9.0",
              "8.8.0"
            ]
          }
        ],
        "aliases": [
          "CVE-2026-9079"
        ],
        "credits": [
          {
            "name": "Guannan Wang",
            "type": "finder"
          },
          {
            "name": "Zhanpeng Liu",
            "type": "finder"
          },
          {
            "name": "Jiashuo Liang",
            "type": "finder"
          },
          {
            "name": "Guancheng Li",
            "type": "finder"
          },
          {
            "name": "Daniel Stenberg",
            "type": "remediation developer"
          }
        ],
        "database_specific": {
          "CWE": {
            "desc": "Insufficiently Protected Credentials",
            "id": "CWE-522"
          },
          "URL": "https://curl.se/docs/CVE-2026-9079.json",
          "affects": "lib",
          "issue": "https://hackerone.com/reports/3750295",
          "last_affected": "8.20.0",
          "package": "curl",
          "severity": "Medium",
          "www": "https://curl.se/docs/CVE-2026-9079.html"
        },
        "details": "libcurl had a flaw that when instructed to clear proxy authentication\ncredentials which made it not do so, leaving the old credentials around to get\nused for subsequent transfers that should not know nor use them.",
        "id": "CURL-CVE-2026-9079",
        "modified": "2026-09-07T10:34:51.00Z",
        "published": "2026-06-24T08:00:00.00Z",
        "schema_version": "1.5.0",
        "summary": "stale proxy password leak"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2026-9079",
    "datePublished": "2026-07-03T06:16:51.127Z",
    "dateReserved": "2026-05-20T12:59:41.444Z",
    "dateUpdated": "2026-09-15T06:03:28.741Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-9079",
      "date": "2026-09-22",
      "epss": "0.00584",
      "percentile": "0.46609"
    },
    "microsoft_vex": {
      "current_release_date": "2026-08-13T00:03:10.000Z",
      "cve": "CVE-2026-9079",
      "id": "msrc_CVE-2026-9079",
      "initial_release_date": "2026-07-04T01:04:07.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "2",
      "product_status:known_not_affected": "4",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "stale proxy password leak",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-9079.json",
      "version": "5"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "curl",
                "vendor": "curl",
                "versions": [
                  {
                    "lessThan": "8.14.2",
                    "status": "affected",
                    "version": "8.8.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "8.16.1",
                    "status": "affected",
                    "version": "8.15.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "8.20.1",
                    "status": "affected",
                    "version": "8.17.0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "curl",
                "repo": "https://github.com/curl/curl.git",
                "vendor": "curl",
                "versions": [
                  {
                    "lessThan": "88c7e16cceec816a2df45c899d49b1e85513f193",
                    "status": "affected",
                    "version": "d5e83eb745762f48d8fafadc5df5dd3ae8d8941e",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "unaffected",
                "product": "curl",
                "vendor": "curl",
                "versions": [
                  {
                    "status": "affected",
                    "version": "8.20.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.19.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.18.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.17.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.16.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.15.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.14.1"
                  },
                  {
                    "status": "affected",
                    "version": "8.14.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.13.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.12.1"
                  },
                  {
                    "status": "affected",
                    "version": "8.12.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.11.1"
                  },
                  {
                    "status": "affected",
                    "version": "8.11.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.10.1"
                  },
                  {
                    "status": "affected",
                    "version": "8.10.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.9.1"
                  },
                  {
                    "status": "affected",
                    "version": "8.9.0"
                  },
                  {
                    "status": "affected",
                    "version": "8.8.0"
                  }
                ]
              }
            ],
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "9238ECE6-3CA5-48A9-B558-DF2BC6CE04AD",
                    "versionEndExcluding": "8.21.0",
                    "versionStartIncluding": "8.8.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "libcurl had a flaw that when instructed to clear proxy authentication\ncredentials which made it not do so, leaving the old credentials around to get\nused for subsequent transfers that should not know nor use them."
          }
        ],
        "id": "CVE-2026-9079",
        "lastModified": "2026-09-15T07:16:34.597",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-9079",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-06T16:49:15.639683Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-07-03T07:16:25.620",
        "references": [
          {
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://curl.se/docs/CVE-2026-9079.html"
          },
          {
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://curl.se/docs/CVE-2026-9079.json"
          },
          {
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "tags": [
              "Exploit",
              "Issue Tracking",
              "Third Party Advisory"
            ],
            "url": "https://hackerone.com/reports/3750295"
          },
          {
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
            "tags": [
              "Exploit",
              "Issue Tracking",
              "Third Party Advisory"
            ],
            "url": "https://hackerone.com/reports/3750295"
          }
        ],
        "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-522"
              }
            ],
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-522"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-22T13:26:59+00:00",
      "cve": "CVE-2026-9079",
      "id": "CVE-2026-9079",
      "initial_release_date": "2026-07-03T06:16:51.127000+00:00",
      "product_status:fixed": "56",
      "product_status:known_affected": "5",
      "product_status:known_not_affected": "93",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-9079.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-09T00:27:22Z",
      "cve": "CVE-2026-9079",
      "id": "CVE-2026-9079",
      "initial_release_date": "2026-07-10T03:20:22Z",
      "product_status:first_fixed": "13",
      "product_status:known_affected": "438",
      "product_status:known_not_affected": "63",
      "product_status:recommended": "122",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-9079",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-9079.json",
      "version": "9"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 9.8,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-9079",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-07-06T16:49:15.639683Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-07-06T16:49:51.324Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "references": [
              {
                "tags": [
                  "exploit"
                ],
                "url": "https://hackerone.com/reports/3750295"
              }
            ],
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "curl",
              "vendor": "curl",
              "versions": [
                {
                  "lessThan": "8.14.2",
                  "status": "affected",
                  "version": "8.8.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "8.16.1",
                  "status": "affected",
                  "version": "8.15.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "8.20.1",
                  "status": "affected",
                  "version": "8.17.0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "curl",
              "repo": "https://github.com/curl/curl.git",
              "vendor": "curl",
              "versions": [
                {
                  "lessThan": "88c7e16cceec816a2df45c899d49b1e85513f193",
                  "status": "affected",
                  "version": "d5e83eb745762f48d8fafadc5df5dd3ae8d8941e",
                  "versionType": "git"
                }
              ]
            },
            {
              "defaultStatus": "unaffected",
              "product": "curl",
              "vendor": "curl",
              "versions": [
                {
                  "status": "affected",
                  "version": "8.20.0"
                },
                {
                  "status": "affected",
                  "version": "8.19.0"
                },
                {
                  "status": "affected",
                  "version": "8.18.0"
                },
                {
                  "status": "affected",
                  "version": "8.17.0"
                },
                {
                  "status": "affected",
                  "version": "8.16.0"
                },
                {
                  "status": "affected",
                  "version": "8.15.0"
                },
                {
                  "status": "affected",
                  "version": "8.14.1"
                },
                {
                  "status": "affected",
                  "version": "8.14.0"
                },
                {
                  "status": "affected",
                  "version": "8.13.0"
                },
                {
                  "status": "affected",
                  "version": "8.12.1"
                },
                {
                  "status": "affected",
                  "version": "8.12.0"
                },
                {
                  "status": "affected",
                  "version": "8.11.1"
                },
                {
                  "status": "affected",
                  "version": "8.11.0"
                },
                {
                  "status": "affected",
                  "version": "8.10.1"
                },
                {
                  "status": "affected",
                  "version": "8.10.0"
                },
                {
                  "status": "affected",
                  "version": "8.9.1"
                },
                {
                  "status": "affected",
                  "version": "8.9.0"
                },
                {
                  "status": "affected",
                  "version": "8.8.0"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Guannan Wang"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Zhanpeng Liu"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Jiashuo Liang"
            },
            {
              "lang": "en",
              "type": "finder",
              "value": "Guancheng Li"
            },
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Daniel Stenberg"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "libcurl had a flaw that when instructed to clear proxy authentication\ncredentials which made it not do so, leaving the old credentials around to get\nused for subsequent transfers that should not know nor use them."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-522",
                  "description": "Insufficiently Protected Credentials",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-09-15T06:03:28.741Z",
            "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "shortName": "curl"
          },
          "references": [
            {
              "url": "https://curl.se/docs/CVE-2026-9079.json"
            },
            {
              "url": "https://curl.se/docs/CVE-2026-9079.html"
            },
            {
              "url": "https://hackerone.com/reports/3750295"
            }
          ],
          "title": "stale proxy password leak",
          "x_generator": {
            "engine": "cvelib 1.8.0"
          },
          "x_osv": {
            "affected": [
              {
                "ranges": [
                  {
                    "events": [
                      {
                        "introduced": "8.8.0"
                      },
                      {
                        "fixed": "8.14.2"
                      },
                      {
                        "introduced": "8.15.0"
                      },
                      {
                        "fixed": "8.16.1"
                      },
                      {
                        "introduced": "8.17.0"
                      },
                      {
                        "fixed": "8.20.1"
                      }
                    ],
                    "type": "SEMVER"
                  },
                  {
                    "events": [
                      {
                        "introduced": "d5e83eb745762f48d8fafadc5df5dd3ae8d8941e"
                      },
                      {
                        "fixed": "88c7e16cceec816a2df45c899d49b1e85513f193"
                      }
                    ],
                    "repo": "https://github.com/curl/curl.git",
                    "type": "GIT"
                  }
                ],
                "versions": [
                  "8.20.0",
                  "8.19.0",
                  "8.18.0",
                  "8.17.0",
                  "8.16.0",
                  "8.15.0",
                  "8.14.1",
                  "8.14.0",
                  "8.13.0",
                  "8.12.1",
                  "8.12.0",
                  "8.11.1",
                  "8.11.0",
                  "8.10.1",
                  "8.10.0",
                  "8.9.1",
                  "8.9.0",
                  "8.8.0"
                ]
              }
            ],
            "aliases": [
              "CVE-2026-9079"
            ],
            "credits": [
              {
                "name": "Guannan Wang",
                "type": "finder"
              },
              {
                "name": "Zhanpeng Liu",
                "type": "finder"
              },
              {
                "name": "Jiashuo Liang",
                "type": "finder"
              },
              {
                "name": "Guancheng Li",
                "type": "finder"
              },
              {
                "name": "Daniel Stenberg",
                "type": "remediation developer"
              }
            ],
            "database_specific": {
              "CWE": {
                "desc": "Insufficiently Protected Credentials",
                "id": "CWE-522"
              },
              "URL": "https://curl.se/docs/CVE-2026-9079.json",
              "affects": "lib",
              "issue": "https://hackerone.com/reports/3750295",
              "last_affected": "8.20.0",
              "package": "curl",
              "severity": "Medium",
              "www": "https://curl.se/docs/CVE-2026-9079.html"
            },
            "details": "libcurl had a flaw that when instructed to clear proxy authentication\ncredentials which made it not do so, leaving the old credentials around to get\nused for subsequent transfers that should not know nor use them.",
            "id": "CURL-CVE-2026-9079",
            "modified": "2026-09-07T10:34:51.00Z",
            "published": "2026-06-24T08:00:00.00Z",
            "schema_version": "1.5.0",
            "summary": "stale proxy password leak"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "assignerShortName": "curl",
        "cveId": "CVE-2026-9079",
        "datePublished": "2026-07-03T06:16:51.127Z",
        "dateReserved": "2026-05-20T12:59:41.444Z",
        "dateUpdated": "2026-09-15T06:03:28.741Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

RHSA-2026:34975

Vulnerability from csaf_redhat - Published: 2026-07-02 15:43 - Updated: 2026-09-22 13:27

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Important

Scope

24 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

A flaw was found in curl. When libcurl is instructed to clear proxy authentication credentials, it fails to do so, leaving the old credentials available. This could lead to the unintended reuse of sensitive proxy authentication credentials for subsequent network transfers, potentially resulting in unauthorized access or information disclosure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Fixed: 4 products

https://access.redhat.com/errata/RHSA-2026:34975

Open the full advisory

RHSA-2026:56869

Vulnerability from csaf_redhat - Published: 2026-08-19 13:28 - Updated: 2026-09-18 12:26

Summary

Red Hat Security Advisory: Red Hat JBoss Core Services Apache HTTP Server 2.4.62 SP5 security update

Severity

Important

Scope

30 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Fixed: 1 product

https://access.redhat.com/errata/RHSA-2026:56869

Open the full advisory

RHSA-2026:69125

Vulnerability from csaf_opensuse - Published: 2026-09-21 00:00 - Updated: 2026-09-22 16:06

Summary

security update for curl

Severity

Important

Scope

6 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 4 products

Open the full advisory

RLSA-2026:69125 (CVE-2026-11856)

Vulnerability from osv_rocky – Published: 2026-09-22 12:08 – Updated: 2026-09-22 18:11 – Source website

Summary

Important: curl security update

Details

The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.

Security Fix(es):

libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse (CVE-2026-8932)
curl: curl: Information disclosure via incorrect .netrc password lookup (CVE-2026-8926)
curl: libcurl: Unauthorized connection reuse due to a logical error (CVE-2026-8458)
curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924)
curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856)
libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials (CVE-2026-9079)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Severity

8.1 (High)


                    
                      CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Credits

Rocky Enterprise Software Foundation

Red Hat

References

URL

Type

	https://errata.rockylinux.org/RLSA-2026:69125	ADVISORY
	https://bugzilla.redhat.com/show_bug.cgi?id=2496759	REPORT
	https://bugzilla.redhat.com/show_bug.cgi?id=2496760	REPORT
	https://bugzilla.redhat.com/show_bug.cgi?id=2496764	REPORT
	https://bugzilla.redhat.com/show_bug.cgi?id=2496765	REPORT
	https://bugzilla.redhat.com/show_bug.cgi?id=2496767	REPORT
	https://bugzilla.redhat.com/show_bug.cgi?id=2496771	REPORT
	https://access.redhat.com/errata/RHSA-2026:69125	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Rocky Linux:10",
        "name": "curl",
        "purl": "pkg:rpm/rocky-linux/curl?distro=rocky-linux-10\u0026epoch=0"
      },
      "ranges": [
        {
          "database_specific": {
            "yum_repository": "BaseOS"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0:8.12.1-4.el10_2.6"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [
    {
      "name": "Rocky Enterprise Software Foundation"
    },
    {
      "name": "Red Hat"
    }
  ],
  "database_specific": {
    "license": "CC-BY-4.0",
    "license_url": "https://creativecommons.org/licenses/by/4.0/",
    "source_advisory": "RHSA-2026:69125"
  },
  "details": "The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP.\n\nSecurity Fix(es):\n\n* libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse (CVE-2026-8932)\n\n* curl: curl: Information disclosure via incorrect .netrc password lookup (CVE-2026-8926)\n\n* curl: libcurl: Unauthorized connection reuse due to a logical error (CVE-2026-8458)\n\n* curl: curl: Cookie injection via malicious HTTP server using super cookies (CVE-2026-8924)\n\n* curl: curl: Information disclosure via incorrect Digest authentication header reuse (CVE-2026-11856)\n\n* libcurl: libcurl: Information disclosure due to failure to clear proxy authentication credentials (CVE-2026-9079)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
  "id": "RLSA-2026:69125",
  "modified": "2026-09-22T18:11:34.291815Z",
  "published": "2026-09-22T12:08:07.529031Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://errata.rockylinux.org/RLSA-2026:69125"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496759"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496760"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496764"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496765"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496767"
    },
    {
      "type": "REPORT",
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496771"
    },
    {
      "type": "ADVISORY",
      "url": "https://access.redhat.com/errata/RHSA-2026:69125"
    }
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Important: curl security update",
  "upstream": [
    "CVE-2026-11856",
    "CVE-2026-8458",
    "CVE-2026-8924",
    "CVE-2026-8926",
    "CVE-2026-8932",
    "CVE-2026-9079"
  ]
}

SUSE-SU-2026:22553-1

Vulnerability from csaf_suse - Published: 2026-07-08 13:46 - Updated: 2026-09-16 20:02

Summary

Security update for curl

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 8 products

Open the full advisory

SUSE-SU-2026:22582-1

Vulnerability from csaf_suse - Published: 2026-07-08 13:46 - Updated: 2026-09-16 20:03

Summary

Security update for curl

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 36 products

Open the full advisory

SUSE-SU-2026:22709-1

Vulnerability from csaf_suse - Published: 2026-07-14 12:55 - Updated: 2026-09-20 18:40

Summary

Security update for curl

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 6 products

Open the full advisory

SUSE-SU-2026:22889-1

Vulnerability from csaf_suse - Published: 2026-07-21 16:53 - Updated: 2026-09-16 20:07

Summary

Security update for curl

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 8 products

Open the full advisory

SUSE-SU-2026:2926-1

Vulnerability from csaf_suse - Published: 2026-07-13 17:55 - Updated: 2026-09-17 16:30

Summary

Security update for curl

Severity

Important

Scope

10 vulnerabilities in this advisory, including CVE-2026-9079.

CVE-2026-9079

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Recommended: 39 products

Open the full advisory

UBUNTU-CVE-2026-9079 (CVE-2026-9079)

Vulnerability from osv_ubuntu – Published: 2026-06-24 14:00 – Updated: 2026-07-09 15:15 – Source website

Details

Severity

9.8 (Critical)


                    
                      CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-9079	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-9079	REPORT
	https://curl.se/L7HzKXisfJ/CVE-2026-9079.md	REPORT
	https://ubuntu.com/security/notices/USN-8487-1	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "curl",
            "binary_version": "8.14.1-2ubuntu1.4"
          },
          {
            "binary_name": "libcurl3t64-gnutls",
            "binary_version": "8.14.1-2ubuntu1.4"
          },
          {
            "binary_name": "libcurl4t64",
            "binary_version": "8.14.1-2ubuntu1.4"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:25.10",
        "name": "curl",
        "purl": "pkg:deb/ubuntu/curl@8.14.1-2ubuntu1.4?arch=source\u0026distro=questing"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.14.1-2ubuntu1.4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.12.1-3ubuntu1",
        "8.13.0-5ubuntu1",
        "8.14.1-1ubuntu2",
        "8.14.1-1ubuntu3",
        "8.14.1-2ubuntu1",
        "8.14.1-2ubuntu1.1",
        "8.14.1-2ubuntu1.2",
        "8.14.1-2ubuntu1.3"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "curl",
            "binary_version": "8.18.0-1ubuntu2.2"
          },
          {
            "binary_name": "libcurl3t64-gnutls",
            "binary_version": "8.18.0-1ubuntu2.2"
          },
          {
            "binary_name": "libcurl4t64",
            "binary_version": "8.18.0-1ubuntu2.2"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "curl",
        "purl": "pkg:deb/ubuntu/curl@8.18.0-1ubuntu2.2?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.18.0-1ubuntu2.2"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.14.1-2ubuntu1",
        "8.17.0-1ubuntu1",
        "8.18.0-1ubuntu1",
        "8.18.0-1ubuntu2",
        "8.18.0-1ubuntu2.1"
      ]
    }
  ],
  "aliases": [],
  "details": "libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.",
  "id": "UBUNTU-CVE-2026-9079",
  "modified": "2026-07-09T15:15:43Z",
  "published": "2026-06-24T14:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-9079"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-9079"
    },
    {
      "type": "REPORT",
      "url": "https://curl.se/L7HzKXisfJ/CVE-2026-9079.md"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8487-1"
    }
  ],
  "related": [
    "USN-8487-1"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-9079"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-9079 (GCVE-0-2026-9079)

RLSA-2026:69125 (CVE-2026-11856)

UBUNTU-CVE-2026-9079 (CVE-2026-9079)

Tags

Sightings

Nomenclature

Related by attack behaviour