THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-8927 (CRITICAL 9.1) — When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against `proxyA` using Digest auth, a subsequent

[NVD] CVE-2026-8927 (CRITICAL 9.1) — When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against `proxyA` using Digest auth, a subsequent

lownvdPublished 2026-07-03

CVE-2026-8927 CVSS: 9.1 CRITICAL Published: 2026-07-03T07:16:25.123

When reusing a libcurl handle for sequential transfers driven by environment-variable proxy configuration, libcurl fails to clear the proxy authentication state between requests. Specifically, if the initial transfer authenticates against `proxyA` using Digest auth, a subsequent transfer routed through `proxyB` erroneously leaks

Indicators of compromise

CVE-2026-8927cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8927