CVE-2026-5545 - wrong reuse of HTTP Negotiate connection

Back Back to CVE browser

MEDIUM

wrong reuse of HTTP Negotiate connection

Published May 13, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.51%

Description

libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTP(S) request after a Negotiate-authenticated one, when both use the same host.

libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead.

When reusing a connection a range of criteria must be met. Due to a logical error in the code, a request that was issued by an application could wrongfully reuse an existing connection to the same server that was authenticated using different credentials.

An application that first uses Negotiate authentication to a server with `user1:password1` and then does another operation to the same server asking for any authentication method but for `user2:password2` (while the previous connection is still alive) - the second request gets confused and wrongly reuses the same connection and sends the new request over that connection thinking it uses a mix of user1's and user2's credentials when it is in fact still using the connection authenticated for user1...

Affected products

Vendor Curl Product Curl Default
unaffected
- Version
  7.10.6
  Status
  affected
  Constraints
  <8.14.2
- Version
  7.10.6
  Status
  affected
  Constraints
  -
- Version
  7.10.7
  Status
  affected
  Constraints
  -
- Version
  7.10.8
  Status
  affected
  Constraints
  -
- Version
  7.11.0
  Status
  affected
  Constraints
  -
- Version
  7.11.1
  Status
  affected
  Constraints
  -
- Version
  7.11.2
  Status
  affected
  Constraints
  -
- Version
  7.12.0
  Status
  affected
  Constraints
  -
- Version
  7.12.1
  Status
  affected
  Constraints
  -
- Version
  7.12.2
  Status
  affected
  Constraints
  -
- Version
  7.12.3
  Status
  affected
  Constraints
  -
- Version
  7.13.0
  Status
  affected
  Constraints
  -
- Version
  7.13.1
  Status
  affected
  Constraints
  -
- Version
  7.13.2
  Status
  affected
  Constraints
  -
- Version
  7.14.0
  Status
  affected
  Constraints
  -
- Version
  7.14.1
  Status
  affected
  Constraints
  -
- Version
  7.15.0
  Status
  affected
  Constraints
  -
- Version
  7.15.1
  Status
  affected
  Constraints
  -
- Version
  7.15.2
  Status
  affected
  Constraints
  -
- Version
  7.15.3
  Status
  affected
  Constraints
  -
- Version
  7.15.4
  Status
  affected
  Constraints
  -
- Version
  7.15.5
  Status
  affected
  Constraints
  -
- Version
  7.16.0
  Status
  affected
  Constraints
  -
- Version
  7.16.1
  Status
  affected
  Constraints
  -
- Version
  7.16.2
  Status
  affected
  Constraints
  -
- Version
  7.16.3
  Status
  affected
  Constraints
  -
- Version
  7.16.4
  Status
  affected
  Constraints
  -
- Version
  7.17.0
  Status
  affected
  Constraints
  -
- Version
  7.17.1
  Status
  affected
  Constraints
  -
- Version
  7.18.0
  Status
  affected
  Constraints
  -
- Version
  7.18.1
  Status
  affected
  Constraints
  -
- Version
  7.18.2
  Status
  affected
  Constraints
  -
- Version
  7.19.0
  Status
  affected
  Constraints
  -
- Version
  7.19.1
  Status
  affected
  Constraints
  -
- Version
  7.19.2
  Status
  affected
  Constraints
  -
- Version
  7.19.3
  Status
  affected
  Constraints
  -
- Version
  7.19.4
  Status
  affected
  Constraints
  -
- Version
  7.19.5
  Status
  affected
  Constraints
  -
- Version
  7.19.6
  Status
  affected
  Constraints
  -
- Version
  7.19.7
  Status
  affected
  Constraints
  -
- Version
  7.20.0
  Status
  affected
  Constraints
  -
- Version
  7.20.1
  Status
  affected
  Constraints
  -
- Version
  7.21.0
  Status
  affected
  Constraints
  -
- Version
  7.21.1
  Status
  affected
  Constraints
  -
- Version
  7.21.2
  Status
  affected
  Constraints
  -
- Version
  7.21.3
  Status
  affected
  Constraints
  -
- Version
  7.21.4
  Status
  affected
  Constraints
  -
- Version
  7.21.5
  Status
  affected
  Constraints
  -
- Version
  7.21.6
  Status
  affected
  Constraints
  -
- Version
  7.21.7
  Status
  affected
  Constraints
  -
- Version
  7.22.0
  Status
  affected
  Constraints
  -
- Version
  7.23.0
  Status
  affected
  Constraints
  -
- Version
  7.23.1
  Status
  affected
  Constraints
  -
- Version
  7.24.0
  Status
  affected
  Constraints
  -
- Version
  7.25.0
  Status
  affected
  Constraints
  -
- Version
  7.26.0
  Status
  affected
  Constraints
  -
- Version
  7.27.0
  Status
  affected
  Constraints
  -
- Version
  7.28.0
  Status
  affected
  Constraints
  -
- Version
  7.28.1
  Status
  affected
  Constraints
  -
- Version
  7.29.0
  Status
  affected
  Constraints
  -
- Version
  7.30.0
  Status
  affected
  Constraints
  -
- Version
  7.31.0
  Status
  affected
  Constraints
  -
- Version
  7.32.0
  Status
  affected
  Constraints
  -
- Version
  7.33.0
  Status
  affected
  Constraints
  -
- Version
  7.34.0
  Status
  affected
  Constraints
  -
- Version
  7.35.0
  Status
  affected
  Constraints
  -
- Version
  7.36.0
  Status
  affected
  Constraints
  -
- Version
  7.37.0
  Status
  affected
  Constraints
  -
- Version
  7.37.1
  Status
  affected
  Constraints
  -
- Version
  7.38.0
  Status
  affected
  Constraints
  -
- Version
  7.39.0
  Status
  affected
  Constraints
  -
- Version
  7.40.0
  Status
  affected
  Constraints
  -
- Version
  7.41.0
  Status
  affected
  Constraints
  -
- Version
  7.42.0
  Status
  affected
  Constraints
  -
- Version
  7.42.1
  Status
  affected
  Constraints
  -
- Version
  7.43.0
  Status
  affected
  Constraints
  -
- Version
  7.44.0
  Status
  affected
  Constraints
  -
- Version
  7.45.0
  Status
  affected
  Constraints
  -
- Version
  7.46.0
  Status
  affected
  Constraints
  -
- Version
  7.47.0
  Status
  affected
  Constraints
  -
- Version
  7.47.1
  Status
  affected
  Constraints
  -
- Version
  7.48.0
  Status
  affected
  Constraints
  -
- Version
  7.49.0
  Status
  affected
  Constraints
  -
- Version
  7.49.1
  Status
  affected
  Constraints
  -
- Version
  7.50.0
  Status
  affected
  Constraints
  -
- Version
  7.50.1
  Status
  affected
  Constraints
  -
- Version
  7.50.2
  Status
  affected
  Constraints
  -
- Version
  7.50.3
  Status
  affected
  Constraints
  -
- Version
  7.51.0
  Status
  affected
  Constraints
  -
- Version
  7.52.0
  Status
  affected
  Constraints
  -
- Version
  7.52.1
  Status
  affected
  Constraints
  -
- Version
  7.53.0
  Status
  affected
  Constraints
  -
- Version
  7.53.1
  Status
  affected
  Constraints
  -
- Version
  7.54.0
  Status
  affected
  Constraints
  -
- Version
  7.54.1
  Status
  affected
  Constraints
  -
- Version
  7.55.0
  Status
  affected
  Constraints
  -
- Version
  7.55.1
  Status
  affected
  Constraints
  -
- Version
  7.56.0
  Status
  affected
  Constraints
  -
- Version
  7.56.1
  Status
  affected
  Constraints
  -
- Version
  7.57.0
  Status
  affected
  Constraints
  -
- Version
  7.58.0
  Status
  affected
  Constraints
  -
- Version
  7.59.0
  Status
  affected
  Constraints
  -
- Version
  7.60.0
  Status
  affected
  Constraints
  -
- Version
  7.61.0
  Status
  affected
  Constraints
  -
- Version
  7.61.1
  Status
  affected
  Constraints
  -
- Version
  7.62.0
  Status
  affected
  Constraints
  -
- Version
  7.63.0
  Status
  affected
  Constraints
  -
- Version
  7.64.0
  Status
  affected
  Constraints
  -
- Version
  7.64.1
  Status
  affected
  Constraints
  -
- Version
  7.65.0
  Status
  affected
  Constraints
  -
- Version
  7.65.1
  Status
  affected
  Constraints
  -
- Version
  7.65.2
  Status
  affected
  Constraints
  -
- Version
  7.65.3
  Status
  affected
  Constraints
  -
- Version
  7.66.0
  Status
  affected
  Constraints
  -
- Version
  7.67.0
  Status
  affected
  Constraints
  -
- Version
  7.68.0
  Status
  affected
  Constraints
  -
- Version
  7.69.0
  Status
  affected
  Constraints
  -
- Version
  7.69.1
  Status
  affected
  Constraints
  -
- Version
  7.70.0
  Status
  affected
  Constraints
  -
- Version
  7.71.0
  Status
  affected
  Constraints
  -
- Version
  7.71.1
  Status
  affected
  Constraints
  -
- Version
  7.72.0
  Status
  affected
  Constraints
  -
- Version
  7.73.0
  Status
  affected
  Constraints
  -
- Version
  7.74.0
  Status
  affected
  Constraints
  -
- Version
  7.75.0
  Status
  affected
  Constraints
  -
- Version
  7.76.0
  Status
  affected
  Constraints
  -
- Version
  7.76.1
  Status
  affected
  Constraints
  -
- Version
  7.77.0
  Status
  affected
  Constraints
  -
- Version
  7.78.0
  Status
  affected
  Constraints
  -
- Version
  7.79.0
  Status
  affected
  Constraints
  -
- Version
  7.79.1
  Status
  affected
  Constraints
  -
- Version
  7.80.0
  Status
  affected
  Constraints
  -
- Version
  7.81.0
  Status
  affected
  Constraints
  -
- Version
  7.82.0
  Status
  affected
  Constraints
  -
- Version
  7.83.0
  Status
  affected
  Constraints
  -
- Version
  7.83.1
  Status
  affected
  Constraints
  -
- Version
  7.84.0
  Status
  affected
  Constraints
  -
- Version
  7.85.0
  Status
  affected
  Constraints
  -
- Version
  7.86.0
  Status
  affected
  Constraints
  -
- Version
  7.87.0
  Status
  affected
  Constraints
  -
- Version
  7.88.0
  Status
  affected
  Constraints
  -
- Version
  7.88.1
  Status
  affected
  Constraints
  -
- Version
  8.0.0
  Status
  affected
  Constraints
  -
- Version
  8.0.1
  Status
  affected
  Constraints
  -
- Version
  8.1.0
  Status
  affected
  Constraints
  -
- Version
  8.1.1
  Status
  affected
  Constraints
  -
- Version
  8.1.2
  Status
  affected
  Constraints
  -
- Version
  8.10.0
  Status
  affected
  Constraints
  -
- Version
  8.10.1
  Status
  affected
  Constraints
  -
- Version
  8.11.0
  Status
  affected
  Constraints
  -
- Version
  8.11.1
  Status
  affected
  Constraints
  -
- Version
  8.12.0
  Status
  affected
  Constraints
  -
- Version
  8.12.1
  Status
  affected
  Constraints
  -
- Version
  8.13.0
  Status
  affected
  Constraints
  -
- Version
  8.14.0
  Status
  affected
  Constraints
  -
- Version
  8.14.1
  Status
  affected
  Constraints
  -
- Version
  8.15.0
  Status
  affected
  Constraints
  <8.16.1
- Version
  8.15.0
  Status
  affected
  Constraints
  -
- Version
  8.16.0
  Status
  affected
  Constraints
  -
- Version
  8.17.0
  Status
  affected
  Constraints
  <8.20.0
- Version
  8.17.0
  Status
  affected
  Constraints
  -
- Version
  8.18.0
  Status
  affected
  Constraints
  -
- Version
  8.19.0
  Status
  affected
  Constraints
  -
- Version
  8.2.0
  Status
  affected
  Constraints
  -
- Version
  8.2.1
  Status
  affected
  Constraints
  -
- Version
  8.3.0
  Status
  affected
  Constraints
  -
- Version
  8.4.0
  Status
  affected
  Constraints
  -
- Version
  8.5.0
  Status
  affected
  Constraints
  -
- Version
  8.6.0
  Status
  affected
  Constraints
  -
- Version
  8.7.0
  Status
  affected
  Constraints
  -
- Version
  8.7.1
  Status
  affected
  Constraints
  -
- Version
  8.8.0
  Status
  affected
  Constraints
  -
- Version
  8.9.0
  Status
  affected
  Constraints
  -
- Version
  8.9.1
  Status
  affected
  Constraints
  -
Vendor Curl Product Curl Default
unaffected
- Version
  
  Status
  affected
  Constraints

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Curl

unaffected

Version	Status	Constraints
7.10.6	affected	<8.14.2
7.10.6	affected	-
7.10.7	affected	-
7.10.8	affected	-
7.11.0	affected	-
7.11.1	affected	-
7.11.2	affected	-
7.12.0	affected	-
7.12.1	affected	-
7.12.2	affected	-
7.12.3	affected	-
7.13.0	affected	-
7.13.1	affected	-
7.13.2	affected	-
7.14.0	affected	-
7.14.1	affected	-
7.15.0	affected	-
7.15.1	affected	-
7.15.2	affected	-
7.15.3	affected	-
7.15.4	affected	-
7.15.5	affected	-
7.16.0	affected	-
7.16.1	affected	-
7.16.2	affected	-
7.16.3	affected	-
7.16.4	affected	-
7.17.0	affected	-
7.17.1	affected	-
7.18.0	affected	-
7.18.1	affected	-
7.18.2	affected	-
7.19.0	affected	-
7.19.1	affected	-
7.19.2	affected	-
7.19.3	affected	-
7.19.4	affected	-
7.19.5	affected	-
7.19.6	affected	-
7.19.7	affected	-
7.20.0	affected	-
7.20.1	affected	-
7.21.0	affected	-
7.21.1	affected	-
7.21.2	affected	-
7.21.3	affected	-
7.21.4	affected	-
7.21.5	affected	-
7.21.6	affected	-
7.21.7	affected	-
7.22.0	affected	-
7.23.0	affected	-
7.23.1	affected	-
7.24.0	affected	-
7.25.0	affected	-
7.26.0	affected	-
7.27.0	affected	-
7.28.0	affected	-
7.28.1	affected	-
7.29.0	affected	-
7.30.0	affected	-
7.31.0	affected	-
7.32.0	affected	-
7.33.0	affected	-
7.34.0	affected	-
7.35.0	affected	-
7.36.0	affected	-
7.37.0	affected	-
7.37.1	affected	-
7.38.0	affected	-
7.39.0	affected	-
7.40.0	affected	-
7.41.0	affected	-
7.42.0	affected	-
7.42.1	affected	-
7.43.0	affected	-
7.44.0	affected	-
7.45.0	affected	-
7.46.0	affected	-
7.47.0	affected	-
7.47.1	affected	-
7.48.0	affected	-
7.49.0	affected	-
7.49.1	affected	-
7.50.0	affected	-
7.50.1	affected	-
7.50.2	affected	-
7.50.3	affected	-
7.51.0	affected	-
7.52.0	affected	-
7.52.1	affected	-
7.53.0	affected	-
7.53.1	affected	-
7.54.0	affected	-
7.54.1	affected	-
7.55.0	affected	-
7.55.1	affected	-
7.56.0	affected	-
7.56.1	affected	-
7.57.0	affected	-
7.58.0	affected	-
7.59.0	affected	-
7.60.0	affected	-
7.61.0	affected	-
7.61.1	affected	-
7.62.0	affected	-
7.63.0	affected	-
7.64.0	affected	-
7.64.1	affected	-
7.65.0	affected	-
7.65.1	affected	-
7.65.2	affected	-
7.65.3	affected	-
7.66.0	affected	-
7.67.0	affected	-
7.68.0	affected	-
7.69.0	affected	-
7.69.1	affected	-
7.70.0	affected	-
7.71.0	affected	-
7.71.1	affected	-
7.72.0	affected	-
7.73.0	affected	-
7.74.0	affected	-
7.75.0	affected	-
7.76.0	affected	-
7.76.1	affected	-
7.77.0	affected	-
7.78.0	affected	-
7.79.0	affected	-
7.79.1	affected	-
7.80.0	affected	-
7.81.0	affected	-
7.82.0	affected	-
7.83.0	affected	-
7.83.1	affected	-
7.84.0	affected	-
7.85.0	affected	-
7.86.0	affected	-
7.87.0	affected	-
7.88.0	affected	-
7.88.1	affected	-
8.0.0	affected	-
8.0.1	affected	-
8.1.0	affected	-
8.1.1	affected	-
8.1.2	affected	-
8.10.0	affected	-
8.10.1	affected	-
8.11.0	affected	-
8.11.1	affected	-
8.12.0	affected	-
8.12.1	affected	-
8.13.0	affected	-
8.14.0	affected	-
8.14.1	affected	-
8.15.0	affected	<8.16.1
8.15.0	affected	-
8.16.0	affected	-
8.17.0	affected	<8.20.0
8.17.0	affected	-
8.18.0	affected	-
8.19.0	affected	-
8.2.0	affected	-
8.2.1	affected	-
8.3.0	affected	-
8.4.0	affected	-
8.5.0	affected	-
8.6.0	affected	-
8.7.0	affected	-
8.7.1	affected	-
8.8.0	affected	-
8.9.0	affected	-
8.9.1	affected	-

Curl

unaffected

Version	Status	Constraints
	affected

Red Hat Hardened Images

curl-main-8.20.0-0.1.hum1

Fixed · RHSA-2026:12916
Confidential Compute Attestation

build-of-trustee/trustee-rhel9

Fix deferred
Confidential Compute Attestation

confidential-compute-attestation-tech-preview/trustee-rhel9

Fix deferred
Confidential Compute Attestation

openshift-sandboxed-containers/osc-operator-bundle

Fix deferred
Confidential Compute Attestation

openshift-sandboxed-containers/osc-podvm-builder-rhel9

Fix deferred
Confidential Compute Attestation

openshift-sandboxed-containers/osc-podvm-payload-rhel9

Fix deferred
Confidential Compute Attestation

openshift-sandboxed-containers/osc-rhel9-operator

Fix deferred
Logging Subsystem for Red Hat OpenShift

openshift-logging/cluster-logging-operator-bundle

Fix deferred
Logging Subsystem for Red Hat OpenShift

openshift-logging/cluster-logging-rhel9-operator

Fix deferred
Logging Subsystem for Red Hat OpenShift

openshift-logging/eventrouter-rhel9

Fix deferred
Logging Subsystem for Red Hat OpenShift

openshift-logging/fluentd-rhel9

Fix deferred
Logging Subsystem for Red Hat OpenShift

openshift-logging/log-file-metric-exporter-rhel9

Fix deferred
Logging Subsystem for Red Hat OpenShift

openshift-logging/logging-view-plugin-rhel9

Fix deferred
Logging Subsystem for Red Hat OpenShift

openshift-logging/vector-rhel9

Fix deferred
Red Hat Enterprise Linux 10

curl

Affected
Red Hat Enterprise Linux 10

rust

Not affected
Red Hat Enterprise Linux 10

s390utils

Not affected
Red Hat Enterprise Linux 10

snphost

Affected
Red Hat Enterprise Linux 10

trustee

Affected
Red Hat Enterprise Linux 10

trustee-guest-components

Affected
Red Hat Enterprise Linux 6

curl

Fix deferred
Red Hat Enterprise Linux 7

curl

Fix deferred
Red Hat Enterprise Linux 8

curl

Fix deferred
Red Hat Enterprise Linux 9

curl

Affected
Red Hat Enterprise Linux 9

rust

Not affected
Red Hat Enterprise Linux 9

snphost

Affected
Red Hat Enterprise Linux 9

trustee-guest-components

Affected
Red Hat Enterprise Linux AI (RHEL AI) 3

rust

Fix deferred
Red Hat Hardened Images

rust

Not affected
Red Hat JBoss Core Services

curl

Fix deferred
Red Hat OpenShift Container Platform 4

openshift/ose-rhel-coreos-8

Fix deferred
Red Hat OpenShift Container Platform 4

openshift/ose-rhel-coreos-9

Fix deferred
Red Hat OpenShift Dev Spaces

devspaces/code-rhel9

Fix deferred
Red Hat Trusted Profile Analyzer

rhtpa/rhtpa-trustification-service-rhel9

Fix deferred

Product	Package	State	Advisory
Red Hat Hardened Images	curl-main-8.20.0-0.1.hum1	Fixed	RHSA-2026:12916
Confidential Compute Attestation	build-of-trustee/trustee-rhel9	Fix deferred	n/a
Confidential Compute Attestation	confidential-compute-attestation-tech-preview/trustee-rhel9	Fix deferred	n/a
Confidential Compute Attestation	openshift-sandboxed-containers/osc-operator-bundle	Fix deferred	n/a
Confidential Compute Attestation	openshift-sandboxed-containers/osc-podvm-builder-rhel9	Fix deferred	n/a
Confidential Compute Attestation	openshift-sandboxed-containers/osc-podvm-payload-rhel9	Fix deferred	n/a
Confidential Compute Attestation	openshift-sandboxed-containers/osc-rhel9-operator	Fix deferred	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/cluster-logging-operator-bundle	Fix deferred	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/cluster-logging-rhel9-operator	Fix deferred	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/eventrouter-rhel9	Fix deferred	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/fluentd-rhel9	Fix deferred	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/log-file-metric-exporter-rhel9	Fix deferred	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/logging-view-plugin-rhel9	Fix deferred	n/a
Logging Subsystem for Red Hat OpenShift	openshift-logging/vector-rhel9	Fix deferred	n/a
Red Hat Enterprise Linux 10	curl	Affected	n/a
Red Hat Enterprise Linux 10	rust	Not affected	n/a
Red Hat Enterprise Linux 10	s390utils	Not affected	n/a
Red Hat Enterprise Linux 10	snphost	Affected	n/a
Red Hat Enterprise Linux 10	trustee	Affected	n/a
Red Hat Enterprise Linux 10	trustee-guest-components	Affected	n/a
Red Hat Enterprise Linux 6	curl	Fix deferred	n/a
Red Hat Enterprise Linux 7	curl	Fix deferred	n/a
Red Hat Enterprise Linux 8	curl	Fix deferred	n/a
Red Hat Enterprise Linux 9	curl	Affected	n/a
Red Hat Enterprise Linux 9	rust	Not affected	n/a
Red Hat Enterprise Linux 9	snphost	Affected	n/a
Red Hat Enterprise Linux 9	trustee-guest-components	Affected	n/a
Red Hat Enterprise Linux AI (RHEL AI) 3	rust	Fix deferred	n/a
Red Hat Hardened Images	rust	Not affected	n/a
Red Hat JBoss Core Services	curl	Fix deferred	n/a
Red Hat OpenShift Container Platform 4	openshift/ose-rhel-coreos-8	Fix deferred	n/a
Red Hat OpenShift Container Platform 4	openshift/ose-rhel-coreos-9	Fix deferred	n/a
Red Hat OpenShift Dev Spaces	devspaces/code-rhel9	Fix deferred	n/a
Red Hat Trusted Profile Analyzer	rhtpa/rhtpa-trustification-service-rhel9	Fix deferred	n/a

Remediation

Red Hat statement

Moderate: A flaw in libcurl allows for the wrong reuse of HTTP Negotiate authenticated connections. This can occur when an application makes an authenticated HTTP(S) request after a Negotiate-authenticated one to the same host, potentially leading to a request being sent over a connection authenticated with unintended credentials. This issue affects applications using libcurl versions from 7.10.6 up to and including 8.19.0.

Red Hat mitigation

To mitigate this issue, applications using libcurl can disable connection reuse. This can be achieved by setting one of the following libcurl options: CURLOPT_FRESH_CONNECT to force a new connection for each request, CURLOPT_MAXCONNECTS to limit the total number of open connections, or CURLMOPT_MAX_HOST_CONNECTIONS when using the curl_multi API to limit connections per host. Disabling connection reuse may impact application performance due to increased overhead for establishing new connections.

Weaknesses (3)

CWE-305

CWE-488

CWE-613

References (8)

https://access.redhat.com/security/cve/CVE-2026-5545
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2461204
Issue Tracking
https://curl.se/docs/CVE-2026-5545.html
PatchVendor Advisory
https://curl.se/docs/CVE-2026-5545.json
Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29923
Advisory
https://hackerone.com/reports/3642555
exploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-5545
https://www.cve.org/CVERecord?id=CVE-2026-5545

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-5545		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2461204		Issue Tracking
https://curl.se/docs/CVE-2026-5545.html		PatchVendor Advisory
https://curl.se/docs/CVE-2026-5545.json		Vendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29923		Advisory
https://hackerone.com/reports/3642555		exploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-5545
https://www.cve.org/CVERecord?id=CVE-2026-5545