CVE-2025-10966

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description The software lacks proper host verification when establishing SSH connections for SFTP operations using the wolfSSH backend. This flaw allows for man-in-the-middle (MITM) attacks to go undetected, as any host key is accepted. The issue stems from a flaw in the code managing SSH connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.