ALPINE-CVE-2026-87861

ALPINE-CVE-2026-87861

This page contains facts from public vulnerability sources. Check the original advisory before updating.

When using ambient user credentials, an HTTP request directed to one origin may be dispatched over a connection previously authenticated via Negotiate for a different origin, leaving the request's intended credentials unused.

Fix available

Published

2026-10-20T21:17:20.167Z

Updated

2026-10-25T16:30:02.575246644Z

Stack: system

Check your server →