Intelligence online17 sources monitored15 actively exploited 7d40 published 24hChecked recently
Vulnerability record

CVE-2026-9079

CriticalNo known exploitation

Patch status

Official fix available since

Apply the vendor's update to every affected system. Check the fixed-in versions below where known.

Basis: NVD patch reference

Description

libcurl had a flaw that when instructed to clear proxy authentication credentials which made it not do so, leaving the old credentials around to get used for subsequent transfers that should not know nor use them.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdate

    CVE-2026-9079 scored CVSS 9.8

    Basis: NIST National Vulnerability Database

  2. Patch releasedUpdate

    Patch released for CVE-2026-9079

    An official fix is now available.

    Basis: NVD patch reference

Coverage

References