CVE-2025-10966

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

Scoring

Severity

MEDIUM

CVSS base score

4.3

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS probability

0.40%

CWE

CWE-322

Published

2025-11-07

Last modified

2026-09-17

Affected products

• curl curl
• curl curl
• curl curl
• curl curl
• curl curl
• curl curl
• curl curl
• curl curl

Weakness type

• CWE-322

Related vulnerabilities

• CVE-2025-20163 — Cisco Nexus Dashboard Fabric Controller SSH Host Key Vulnerability
• CVE-2022-39255 — Matrix iOS SDK vulnerable ton Olm/Megolm protocol confusion
• CVE-2022-39254 — When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder
• CVE-2022-39252 — When matrix-rust-sdk recieves forwarded room keys, the reciever doesn't check if it requested the key from the forwarder
• CVE-2022-39251 — Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
• CVE-2022-39250 — Matrix JavaScript SDK vulnerable to key/device identifier confusion in SAS verification
• CVE-2022-39248 — matrix-android-sdk2 vulnerable to Olm/Megolm protocol confusion
• CVE-2024-47519 — Backup uploads to ETM subject to man-in-the-middle interception

Markdown version · Browse all CVEs