CVE-2026-6276 libcurl Cookie Leak: Why Low Severity Still Matters on Windows
Microsoft this week listed CVE-2026-6276, a low-severity information disclosure vulnerability disclosed by the curl project on April 29, 2026, that can cause libcurl to leak HTTP cookies to the wrong...