diff --git a/cves/2021/CVE-2021-28480.yaml b/cves/2021/CVE-2021-28480.yaml
index 18d0b534ef..180e6c8043 100644
--- a/cves/2021/CVE-2021-28480.yaml
+++ b/cves/2021/CVE-2021-28480.yaml
@@ -22,6 +22,7 @@ requests:
       - type: word
         words:
           - "NTLM"
+          - "Negotiate"
         part: header
         condition: and