CVE-2026-6276— stale custom cookie host causes cookie leak
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-6276
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
stale custom cookie host causes cookie leak
Source: NVD (National Vulnerability Database)
Vulnerability Description
Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second request is subsequently done using the same *easy handle* but without the custom `Host:` header set, the second request would use stale information and pass on cookies meant for the first host in the second request. Leak them.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
libcurl 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
libcurl是cURL开源的一个免费且易于使用的客户端 URL 传输库。 libcurl存在安全漏洞，该漏洞源于自定义Host标头处理不当，可能导致第二次请求时错误传递第一次请求的Cookie。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-6276
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-6276
请登录查看更多情报信息。
Same Patch Batch · curl · 2026-05-13 · 8 CVEs total
| CVE-2026-7168 | cross-proxy Digest auth state leak | |
| CVE-2026-7009 | OCSP stapling bypass with Apple SecTrust | |
| CVE-2026-6253 | proxy credentials leak over redirect-to proxy | |
| CVE-2026-6429 | netrc credential leak with reused proxy connection | |
| CVE-2026-4873 | connection reuse ignores TLS requirement | |
| CVE-2026-5545 | wrong reuse of HTTP Negotiate connection | |
| CVE-2026-5773 | wrong reuse of SMB connection |
IV. Related Vulnerabilities
V. Comments for CVE-2026-6276
No comments yet