1 matches found
AZL-91821 CVE-2026-8926 affecting package curl for versions less than 8.11.1-10
When asking curl to use a .netrc file to find credentials and at the same time specifying a URL with a usernamewithout a password, like https://[email protected]/, curl could wrongly get and use the password for another user set in the .netrc file for that host if such a one exists and there is no...
9.1CVSS5.9AI score0.00444EPSS
SaveExploits1References1
20