{"uuid": "f4b062b4-0ed3-4800-92b3-e41ad7a0e17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-19931", "type": "seen", "source": "https://bsky.app/profile/bootintel.bsky.social/post/3mv2ac6g4qb25", "content": "Critical CVE landed today in libcurl:\n\nCVE-2026-19931. A flaw in libcurl makes it wrongly reuse an HTTP connection setup for a given hostname using Negotiate authentication, when the initial request is done using empty credentials. This can make us\u2026\n\nnvd.nist.gov/vuln/detail/CVE-2026-19931", "creation_timestamp": "2026-09-09T00:02:14.780193Z"}