CVE-2026-87861
NONE—CVSS v3
—CVSS v2
0.29%
EPSS (exploit probability)
—CWE
Description
When using ambient user credentials, an HTTP request directed to one origin
may be dispatched over a connection previously authenticated via Negotiate for
a different origin, leaving the request's intended credentials unused.
Affected routers (0)
No routers currently mapped to this CVE in our database.