CVE-2026-8458

Name of the Vulnerable Software and Affected Versions libcurl (affected versions not specified)

Description A logical error in the connection pooling mechanism allows the software to reuse an incorrect connection for Negotiate-authenticated requests. This occurs even when the requests are configured to use different services, potentially leading to a request being sent over a connection authenticated for a different service on the same server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.