Yüksek CVSS 8.1
CVE-2026-86409: CVE-2026-86409: güvenlik açığı
Açıklama (NVD)
Setting `CURLOPT_AWS_SIGV4` to NULL but does not disable SigV4 authentication, contrary to expectations and documentation. A subsequent transfer on the same handle still sends an `Authorization: AWS4-HMAC-SHA256` header to whatever URL isset next, leaking state information.
Özet bilgiler
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %1,10 (yüzdelik 66)
- CWE
- CWE-201
- Yama
- Yok / bilinmiyor