PT-2026-98285 · Php · Php

·

CVE-2026-91766

·

تاريخ النشر

2026-09-24

·

تاريخ التحديث

2026-10-13

CVSS v3.1

5.9

متوسطة

المتجهAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions PHP (affected versions not specified)
Description PHP contains an issue where credentials could be leaked during a redirect when using curl. This occurs when the application follows a redirect to an external host and inadvertently includes authentication credentials in the request to the new location.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Insufficiently Protected Credentials

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

AZL-104916
BIT-LIBPHP-2026-91766
BIT-PHP-2026-91766
BIT-PHP-MIN-2026-91766
CVE-2026-91766
OPENSUSE-SU-2026:11901-1
SUSE-SU-2026:4602-1
SUSE-SU-2026:4603-1
SUSE-SU-2026:4651-1

المنتجات المتأثرة

Php