CVE-2026-7168 | cURL up to 8.19.0 Cross-Proxy Digest Auth information disclosure

A vulnerability was found in cURL up to 8.19.0. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the component Cross-Proxy Digest Auth Handler. The manipulation leads to information disclosure.

This vulnerability is traded as CVE-2026-7168. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is recommended.