CVE Vulnerabilities

CVE-2025-10966

Published: Nov 07, 2025 | Modified: Nov 07, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
5.9 MODERATE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Ubuntu
LOW

curls code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms.

This prevents curl from detecting MITM attackers and more.

Affected Software

Name Vendor Start Version End Version
Curl Ubuntu upstream *

References