CVE-2026-3784

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description curl improperly reuses an existing HTTP proxy connection when performing a CONNECT request to a server, even if the new request uses different credentials for the HTTP proxy. The expected behavior is to establish or utilize a distinct connection. This issue involves incorrect handling of proxy connections and authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.