CVE-2025-10966

The record

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

Affected packages

Related vulnerabilities

• CVE-2026-5545 libcurl might in some circumstances reuse the wrong connection when asked to do an… Also affects curl
• CVE-2026-5773 libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers. Also affects curl
• CVE-2026-6276 Using libcurl, when a custom `Host:` header is first set for an HTTP request and a second… Also affects curl
• CVE-2026-6253 curl might erroneously pass on credentials for a first proxy to a second proxy. Also affects curl
• CVE-2026-6429 When asked to both use a `.netrc` file for credentials and to follow HTTP redirects… Also affects curl
• CVE-2026-4873 A vulnerability exists where a connection requiring TLS incorrectly reuses an existing… Also affects curl
• CVE-2026-3783 When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a… Also affects curl
• CVE-2026-3784 curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server… Also affects curl