CVE-2026-7168: cross-proxy Digest auth state leak

Overview

Severity

Medium (CVSS 5.3)

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U

Exploit Status

Not Exploited

Patch Tuesday

2026-May

Released

2026-05-14

Last Updated

2026-06-03

EPSS Score

0.59% (percentile: 46.1%)

Affected Products (2)

Open Source Software

• azl3 curl 8.11.1-6 on Azure Linux 3.0

Other

• 21382-17084

Revision History

• 2026-05-14: Information published.
• 2026-05-19: Information published.
• 2026-05-26: Information published.
• 2026-06-03: Information published.