CVE-2026-3784 - Vulnerability Analysis

Overview

curl contains a broken authentication caused by reusing existing HTTP proxy connections with different credentials during CONNECT requests, letting attackers bypass proxy authentication, exploit requires use of HTTP proxy with different credentials.

Severity & Score

Impact

Attackers can bypass HTTP proxy authentication by reusing connections, potentially accessing unauthorized resources.

Mitigation

Update to the latest version of curl.

References

• https://curl.se/docs/CVE-2026-3784.html
• https://curl.se/docs/CVE-2026-3784.json
• https://hackerone.com/reports/3584903
• http://www.openwall.com/lists/oss-security/2026/03/11/3

Social Media Activity(1 post)

daniel:// stenberg://

@bagder

Mar 12, 2026

CVE-2026-3784 beat a new #curl record. This flaw existed in curl source code for 24.97 years before it was discovered. Illustrated in the slightly hard-to-read graph below. The average age of a curl vulnerability when reported is eight years. https://curl.se/docs/CVE-2026-3784.html

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner