CVE-2026-7168

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description When using libcurl to perform a transfer over a specific HTTP proxy (proxyA) with Digest authentication and subsequently changing the proxy host to a second one (proxyB) while reusing the same handle, libcurl incorrectly sends the Proxy-Authorization: header intended for proxyA to proxyB.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.