Mmastodon TechnologyCybersecurity first seen 5 d ago, last 5 d ago, peak #2

New curl vulnerability leaks credentials through malicious HTTP proxies

Original: 🚨 EUVD-2026-105306 📊 Score: n/a 📦 Product: curl, curl, curl (+169 more) 🏢 Vendor: curl 📅 Updated: 2026-10-20 📝 An HTTP p

A newly catalogued vulnerability, EUVD-2026-105306, affects curl and libcurl along with more than 170 related product listings. An HTTP proxy can trick libcurl into sending a server's credentials — including Basic passwords or Negotiate/Kerberos tickets — to the proxy itself by answering the CONNECT request. Security teams are assessing exposure across systems using the widely deployed library.

Why now: curl is embedded in countless products, so any credential-leaking flaw triggers immediate review by security teams.

curllibcurlEUVD-2026-105306

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 5 d ago to 5 d ago.

Evidence

• 🚨 EUVD-2026-105306 📊 Score: n/a 📦 Product: curl, curl, curl (+169 more) 🏢 Vendor: curl 📅 Updated: 2026-10-20 📝 An HTTP proxy can trick libcurl into sending the origin's credentials (Basic password, or a Negotiate/Kerberos ticket) to the proxy itself, by answering the `CONNECT`… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/3037666