CVE-2026-86413
NONE—CVSS v3
—CVSS v2
0.31%
EPSS (exploit probability)
—CWE
Description
When using an *ambient user* in a first transfer doing Negotiate
authentication and asked to follow redirects, curl could pass on its
credential details to an unrelated second origin when asked to redirect there.
Affected routers (0)
No routers currently mapped to this CVE in our database.