UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-86413
When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there.
Properties
- Last source
- NVD
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Cve id
- CVE-2026-86413
- First seen by Signal
- 2026-10-20T21:15:35+00:00
- Retrieved at
- 2026-10-20T21:15:35+00:00
- Published at
- 2026-10-20T20:17:25.787
- Last modified
- 2026-10-20T20:17:25.787
Explore deeper with Ninja Signal's threat intelligence graph