CVE-2026-3784 | cURL up to 8.18.0 HTTP Proxy Connection authentication bypass

A vulnerability marked as problematic has been reported in cURL. This vulnerability affects unknown code of the component HTTP Proxy Connection Handler. The manipulation leads to authentication bypass by primary weakness.

This vulnerability is referenced as CVE-2026-3784. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.