VDB
H1-3680680
H1-3680680
PUBLISHED
libcurl omits IPv6 zoneid from host identity and leaks credentials/cookies across scoped link-local realms
Timeline
- Apr 19, 2026 CVE Published
- Apr 19, 2026 PoC Published
Tip. Type any identifier and press Enter to open its detail page. Hit ⌘K from anywhere to focus the bar.
Open the full search in the app →libcurl omits IPv6 zoneid from host identity and leaks credentials/cookies across scoped link-local realms