CVE-2025-10966CWE-322

CVE-2025-10966

Medium · published November 7, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
35.9
In the wild
Unconfirmed
What it is

curl's code for managing SSH connections when SFTP was done using the wolfSSH

powered backend was flawed and missed host verification mechanisms.

This prevents curl from detecting MITM attackers and more.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00427 · 35.9th percentile
Weakness
CWE-322 · Key Exchange without Entity Authentication
Published
2025-11-07T13:15Z
Affected products (1)
ProductVersionsFixed in
haxx/curl≥ 7.69.0, < 8.17.08.17.0
References (5)
https://curl.se/docs/CVE-2025-10966.html · 2499f714-1537-4658-8207-48ae4bb9eae9https://curl.se/docs/CVE-2025-10966.json · 2499f714-1537-4658-8207-48ae4bb9eae9https://hackerone.com/reports/3355218 · 2499f714-1537-4658-8207-48ae4bb9eae9http://www.openwall.com/lists/oss-security/2025/11/05/2 · af854a3a-2127-422b-91ae-364da2661108https://cert-portal.siemens.com/productcert/html/ssa-253495.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 07 NOV 07:26Z
    missing SFTP host verification with wolfSSH
    cvelistv5