Overview
What is CVE-2026-94266?
libcurl could accidentally return a URL for `curl_easy_getinfo()`'s `CURLINFO_EFFECTIVE_URL` option containing credentials, even though neither the URL provided to libcurl nor the redirected URL did.
Source: NVD
CVE intelligence
CVE-2026-94266
Vulnerability intelligence
N/ACVSS not listedScore unavailable
What this means
Review the available evidence
CVE-2026-94266. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
CISA KEVNot listedBased on the latest collected catalog
EPSSUnavailableNo current score collected
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships