2 matches found
OESA-2026-3170 curl security update
cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: When asking curl to use a .netrc file to find credentials and at the same time specifying a URL with a usernamewithout a password, like...
9.1CVSS5.3AI score0.00376EPSS
SaveExploits1References2
CVE-2026-8926
A flaw was found in curl. When curl is configured to use a .netrc file for credentials and a URL is provided with a username but no password, curl may incorrectly retrieve and use the password for a different user from the .netrc file for the same host. This could lead to unauthorized information...
9.1CVSS5.8AI score0.00376EPSS
SaveExploits1References6
20