CVE-2026-86415: CVE-2026-86415: güvenlik açığı

Açıklama (NVD)

libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.

Özet bilgiler

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

%0,42 (yüzdelik 36)

CWE

CWE-201

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• curl.se
• curl.se
• hackerone.com
• CWE-201