Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability
A vulnerability in System.Net.Http allows SocketsHttpHandler to retain proxy authorization headers during an HTTP redirect. This can lead to information disclosure by leaking basic proxy credentials to the destination server.