CVE-2026-91766: PHP had the redirect credential leak curl fixed in 2018
CVEPHPsecurityvulnerabilitycurlcredential leakHTTP redirect
The Reddit post links to a blog article about CVE-2026-91766, which concerns a PHP HTTP redirect credential leak issue that was previously fixed in curl in 2018. The post contains minimal text content, consisting only of a URL to an external blog post at daubois.dev discussing the vulnerability.