high7.5
CVE-2026-86415
libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can b…
Impact
libcurl's connection cache match function never considers the automatic client certificate option, so a cached, already authenticated Schannel connection can be handed to a transfer that got redirected to a different origin, even though the code explicitly switched off the auto client cert option for that transfer to prevent exactly this.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.