THREAT OPS › Threat News › [NVD] CVE-2026-5545 (MEDIUM 6.5) — libcurl might in some circumstances reuse the wrong connection when asked to
do an authenticated HTTP(S) request after a Negotiate-authenticated one, when
both use the same host.
libcurl features a pool of recent connections so that subsequent requests can
reuse an existing conn
[NVD] CVE-2026-5545 (MEDIUM 6.5) — libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host. libcurl features a pool of recent connections so that subsequent requests can reuse an existing conn
CVE-2026-5545 CVSS: 6.5 MEDIUM Published: 2026-05-13T13:01:56.190
libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host.
libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.
When reusing a connection
MITRE ATT&CK techniques
- CredentialsT1589.001
Indicators of compromise
- CVE-2026-5545cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-5545