CVE-2026-87861 cross-origin reuse of a Negotiate connection

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused...

CVE-2026-87861

The curl utility (specifically versions prior to 8.23.0 ) is vulnerable to a connection reuse issue. When using ambient user credentials , an HTTP request intended for one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin. This results in the...

CVE-2026-87861

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused...

CVE-2026-87861 cross-origin reuse of a Negotiate connection

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused...

cross-origin reuse of a Negotiate connection

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused...