Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2025-10966

missing SFTP host verification with wolfSSH

cve-program · severity unknownCVSS unknownCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2025-10966

Published

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2025-10966

Published

curl

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "curl",
                    "product": "curl",
                    "versions": [
                        {
                            "version": "7.69.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "8.14.2"
                        },
                        {
                            "version": "8.15.0",
                            "status": "affected",
                            "versionType": "semver",
                            "lessThan": "8.16.1"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

curl

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "curl",
                    "product": "curl",
                    "versions": [
                        {
                            "version": "6773c7ca65cf2183295e56603f9b86a5ce816a06",
                            "status": "affected",
                            "versionType": "git",
                            "lessThan": "b011e3fcfb06d6c0278595ee2ee297036fbe9793"
                        }
                    ],
                    "defaultStatus": "unaffected",
                    "repo": "https://github.com/curl/curl.git"
                }

curl

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "curl",
                    "product": "curl",
                    "versions": [
                        {
                            "version": "8.16.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.15.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.14.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.14.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.13.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.12.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.12.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.11.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.11.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.10.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.10.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.9.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.9.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.8.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.7.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.7.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.6.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.5.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.4.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.3.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.2.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.2.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.1.2",
                            "status": "affected"
                        },
                        {
                            "version": "8.1.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.1.0",
                            "status": "affected"
                        },
                        {
                            "version": "8.0.1",
                            "status": "affected"
                        },
                        {
                            "version": "8.0.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.88.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.88.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.87.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.86.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.85.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.84.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.83.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.83.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.82.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.81.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.80.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.79.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.79.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.78.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.77.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.76.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.76.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.75.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.74.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.73.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.72.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.71.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.71.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.70.0",
                            "status": "affected"
                        },
                        {
                            "version": "7.69.1",
                            "status": "affected"
                        },
                        {
                            "version": "7.69.0",
                            "status": "affected"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON