Description
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
Affected products
haxx: curl
References5
- curl.se/docs/CVE-2025-10966.html PatchVendor Advisory
- curl.se/docs/CVE-2025-10966.json Vendor Advisory
- www.openwall.com/lists/oss-security/2025/11/05/2 Mailing ListPatchThird Party Advisory
- hackerone.com/reports/3355218 ExploitIssue TrackingThird Party Advisory
- cert-portal.siemens.com/productcert/html/ssa-253495.html
Metrics
- CVSS 3.1
-
4.3
MEDIUM
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS — exploit probability
- 0% percentile: 37 · as of 10 November 2026
- CWE
- CWE-322
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.