Unrated severityNVD Advisory· Published Oct 20, 2026
CVE-2026-86413
CVE-2026-86413
Description
When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1Patches
Vulnerability mechanics
References
3News mentions
1- 24 Security Vulnerabilities Patched in curl Used Across 30 Billion InstallationsCyber Security News · Oct 14, 2026