CVE-2025-10966 — missing SFTP host verification with wolfSSH
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detect…
Published: 2025-11-07 · CVSS: 4.3 · CVSS 3.1
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7