Description
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
INFO
Published Date :
2025-11-07T07:26:30.351Z
Last Modified :
2025-11-07T08:05:50.150Z
Source :
curl
AFFECTED PRODUCTS
The following products are affected by CVE-2025-10966 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-10966.
