Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-3784

Опубликовано: 11 мар. 2026
Источник: nvd
CVSS3: 6.5
EPSS Низкий

Описание

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*
Версия от 7.7 (включая) до 8.18.0 (исключая)

EPSS

Процентиль: 22%
0.00302
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-305

Связанные уязвимости

CVSS3: 6.5
ubuntu
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

CVSS3: 6.5
redhat
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

CVSS3: 6.5
msrc
5 месяцев назад

wrong proxy connection reuse with credentials

CVSS3: 6.5
debian
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNE ...

CVSS3: 6.5
github
5 месяцев назад

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

EPSS

Процентиль: 22%
0.00302
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-305