You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
negotiate authentication
About this tag
The tag 'negotiate authentication' on WindowsForum.com covers discussions about the Negotiate authentication protocol, particularly in the context of security vulnerabilities and fixes. A recent thread highlights CVE-2026-1965, a logic flaw in libcurl's Negotiate authentication code that could cause a request to reuse a connection authenticated for a different user, leading to credential confusion and session exposure. The vulnerability was fixed in curl version 8.19.0. This tag is relevant for users interested in authentication security, curl library updates, and enterprise IT environments where Negotiate authentication is commonly used with Windows Active Directory or Kerberos.
libcurl's Negotiate authentication code has a logic flaw that can cause a request to reuse a connection authenticated for a different user, exposing authenticated sessions to wrong-identity reuse and credential confusion — a vulnerability tracked as CVE-2026-1965 that was disclosed and fixed by...