CVE-2026-9079
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
A flaw in libcurl caused the command to clear proxy authentication credentials to be ineffective, leaving old credentials in memory. These credentials were then used in subsequent transfers that should not have access to them.
Risk Assessment
The organization is at risk of proxy credential leakage to unauthorized sessions, potentially leading to unauthorized network access and security breaches.
Recommendation
Immediately update libcurl to the latest patched version. After updating, verify that proxy authentication credentials are properly cleared.
Original NVD description (English source)
libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.