Search: CVE-2026-86409

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.1	EPSS 1.1%	CVE-2026-86409curl · Insertion of Sensitive Information Into Sent Data High8.1EPSS 1.1%2026-10-20CVE Database V5CVE-2026-86409 CVE-2026-86409 is a vulnerability in curl where setting the CURLOPT_AWS_SIGV4 option to NULL does not disable AWS SigV4 authentication as expected. This causes the curl handle to continue sending an Authorization header with AWS4-HMAC-SHA256 to subsequent URLs, potentially leaking sensitive authentication information. EPSS 1.1%Vulnerability CWE-201	CVE Database V5	2026-10-20

Page 1 of 1 · 7 duplicate CVE records merged