PT-2026-114421 · Git · Curl

CVE-2026-87865

·

Published

2026-10-14

·

Updated

2026-10-14

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
When libcurl uses libssh2 with a hashed known hosts file, an unrelated initial entry can cause host key validation to report a key mismatch as a missing key to the CURLOPT SSH KEYFUNCTION callback.

Improper Certificate Validation

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-87865

Affected Products

Curl