CERT24CVE-2026-94265 — Authorization: Negotiate sent to a foreign originLoading data…
CERT24Threat Observatory
Period

CVE-2026-94265 — Authorization: Negotiate sent to a foreign origin

When processing an HTTP redirect, curl may retain and retransmit the original host’s HTTP Negotiate authentication state. A malicious server can redirect curl to a URL containing user information and force the client to send sensitive authentication data, such as a Kerberos ticket, to an untrusted third-party host.

← Back to intelligence

CVE-2026-94265 — Authorization: Negotiate sent to a foreign origin

When processing an HTTP redirect, curl may retain and retransmit the original host’s HTTP Negotiate authentication state. A malicious server can redirect curl to a URL containing user information and force the client to send sensitive authentication data, such as a Kerberos ticket, to an untrusted third-party host.