CVE-2026-11856

Name of the Vulnerable Software and Affected Versions libcurl (affected versions not specified)

Description When performing a transfer to a specific HTTP origin (hostA) using Digest authentication and subsequently changing the origin to a different one (hostB) while reusing the same handle, libcurl incorrectly forwards the Authorization: header intended for hostA to hostB.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.