Beveiligingsadvies

CVE-2026-80255

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-06 17:48:54

Laatst bijgewerkt 2026-09-15 06:03:13

Toegewezen door curl

CVSS-score 7.5

Status PUBLISHED

Beschrijving

A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of space (ascii code 32) immediately before the `Secure` attribute causes curl to store the cookie without its Secure flag. The cookie might then wrongfully be sent over plaintext HTTP on subsequent requests to the same host.

← Alle CVE's bekijken Bekijk op cve.org ↗