CVE-2026-87861

A flaw in curl (and libcurl ) allows for the cross-origin reuse of a Negotiate connection . When using ambient user credentials (where authentication is handled implicitly without providing a username), curl may improperly reuse an existing connection authenticated via Negotiate for a different s...