> CVE-2026-3784

« BACK_TO_HOME
PUBLISHED
2026-03-11 11:16
MODIFIED
2026-03-11 11:16
EPSS (Prob. Exploit)
0.45%
Top 60.8%
DATA SOURCES:
NVD 🔗 2026-03-11 RED HAT 🔗 2026-03-15 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08 MSRC 🔗 2026-11-02

> DESCRIPTION

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> RED HAT SECURITY ADVISORIES

Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CV...
Red Hat Security Advisory: curl security update
An update for curl is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulner...

> RED HAT SEVERITY ASSESSMENT

THREAT SEVERITY
Moderate

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

wrong proxy connection reuse with credentials

AFFECTED PACKAGES:
Unknown / Unknown
403 versions affected
ALIASES:
CURL-CVE-2026-3784

> HISTORIQUE DES MODIFICATIONS

Première apparition
11/03/2026 11:16
Source: NVD
📊 ENRICHISSEMENT 15/03/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Ancienne valeur:
N/A
Nouvelle valeur:
{ "threat_severity": "Moderate", "severity_scale": null }
📊 ENRICHISSEMENT 15/03/2026 05:01
REDHAT
Champ modifié: Red Hat
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 2 Dernière mise à jour: 7 months ago

> REFERENCES

https://curl.se/docs/CVE-2026-3784.html
https://curl.se/docs/CVE-2026-3784.json
https://hackerone.com/reports/3584903
http://www.openwall.com/lists/oss-security/2026/03/11/3
« BACK_TO_HOME