Vulnerability in Curl

CVE-2026-8458

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent connections so that subsequent requests ca…

Affected products

  • Curl — versions 8.20.0, 8.19.0, 8.18.0

References