Vulnerability in Curl
CVE-2026-8458
libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent connections so that subsequent requests ca…
Affected products
- Curl — versions 8.20.0, 8.19.0, 8.18.0