CVE-2026-9079 stale proxy password leak
libcurl fails to clear proxy credentials, allowing attackers to access stale passwords in subsequent transfers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-9079?
CVE-2026-9079 is a critical vulnerability in Haxx Curl, published on 3 Jul 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.
Weakness: CWE-522
Which versions are affected by CVE-2026-9079?
It affects 1 product.
Products include Haxx Curl.
How do I fix CVE-2026-9079?
Upgrade to a fixed version.
Is CVE-2026-9079 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-9079 exists.
Other vulnerabilities in Haxx Curl
Sources
Also known as ALPINE-CVE-2026-9079, AZL-91791, AZL-91848, BELL-CVE-2026-9079, CURL-CVE-2026-9079, DEBIAN-CVE-2026-9079 and 10 more.