THREATOPS
THREAT OPSThreat News › [NVD] CVE-2026-8458 (MEDIUM 6.5) — libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services". libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid o

[NVD] CVE-2026-8458 (MEDIUM 6.5) — libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services". libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid o

lownvdPublished 2026-07-03

CVE-2026-8458 CVSS: 6.5 MEDIUM Published: 2026-07-03T07:16:24.630

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different "services".

libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.

When reusing a connection a range of criter

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-8458