CVE-2026-3784

Katalog CVE

CVSS 6.5 · Medium EPSS 0,47%

Kerentanan Authentication Bypass by Primary Weakness pada haxx curl. Skor CVSS 3.1 6.5 (Medium) menurut CISA ADP.

Deskripsi (NVD)

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

Rincian

Terbit di NVD

11 Maret 2026

Terakhir diubah

15 September 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-305: Authentication Bypass by Primary Weakness

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 38,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://curl.se/docs/CVE-2026-3784.html patch · advisory vendor
• https://curl.se/docs/CVE-2026-3784.json advisory vendor
• https://hackerone.com/reports/3584903 exploit · issue tracking · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2026/03/11/3 mailing list · advisory pihak ketiga
• https://cert-portal.siemens.com/productcert/html/ssa-253495.html