CVE-2026-86410 — redirect to SFTP or SCP bypasses host verification
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redi…
Published: 2026-10-20 · CVSS: Unscored
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7