Question 1

What is CVE-2026-86413 — CVE-2026-86413?

Accepted Answer

When using an *ambient user* in a first transfer doing Negotiate authentication and asked to follow redirects, curl could pass on its credential details to an unrelated second origin when asked to redirect there.

Question 2

What is the authoritative source for CVE-2026-86413?

Accepted Answer

CVE-2026-86413 (CVE-2026-86413) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-86413CVE-2026-86413

Description

Scoring