CURL-CVE-2025-10966

vendorUSosv

missing SFTP host verification with wolfSSH

view advisory published 2025-11-05Licence: per source

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-10966US——
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting…
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan