ALPINE-CVE-2026-86415
- Source
- https://security.alpinelinux.org/vuln/CVE-2026-86415
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2026-86415.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALPINE-CVE-2026-86415
- Upstream
- CVE-2026-86415
- Published
- 2026-10-20T21:17:20Z
- Modified
- 2026-10-25T16:30:03Z
- Summary
- [none]
- Details
-
libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.
- References