Question 1

What is CVE-2026-94266 — CVE-2026-94266?

Accepted Answer

libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did.

Question 2

What is the authoritative source for CVE-2026-94266?

Accepted Answer

CVE-2026-94266 (CVE-2026-94266) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-94266CVE-2026-94266

Description

Scoring