PT-2025-45413 · Curl+2 · Curl+2

Daniel Stenberg + 1 · Published 2025-11-05 · Updated 2026-05-04 · CVE-2025-10966

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions curl (affected versions not specified)

Description The software lacks proper host verification when establishing SSH connections for SFTP operations using the wolfSSH backend. This flaw allows for man-in-the-middle (MITM) attacks to go undetected, as any host key is accepted. The issue stems from a flaw in the code managing SSH connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-322

Related Identifiers

AZL-69748

AZL-69766

BDU:2025-15585

CVE-2025-10966

ECHO-84EB-3F66-73A1

JLSEC-2026-424

OPENSUSE-SU-2025:15757-1

RHSA-2026:6893

Affected Products

Debian

Red Os

Curl

References · 35

• 🔥 https://hackerone.com/reports/3355218 · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2025:15757-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2025-10966 · Vendor Advisory
• https://osv.dev/vulnerability/JLSEC-2026-424 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2025-10966 · Vendor Advisory
• https://curl.se/docs/CVE-2025-10966.json · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-10966 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-10966 · Vendor Advisory
• https://curl.se/docs/CVE-2025-10966.html · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2025-10966 · Vendor Advisory
• https://osv.dev/vulnerability/CURL-CVE-2025-10966 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-69748 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-13-CVE-2025-10966 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10966 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-69766 · Vendor Advisory