UpHeron
All vulnerabilities

Servers and applications

CVE-2025-10966

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

Severity
Medium 4.3
Published
7 Nov 2025
Last changed
19 Oct 2026
Added to UpHeron
21 Oct 2026
Fixed in
8.17.0
Sources
NVD

Affected software

SoftwareAffected versions
curlServers and applications · cpe:a:haxx:curl
  • From 7.69.0 before 8.17.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-10966
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-10966