https://vulnerability.circl.lu/rss/recent/all/10Most recent entries from all2026-10-01T21:55:07.814604+00:00Vulnerability-Lookupinfo@circl.lupython-feedgenContains only the most 10 recent entries.https://vulnerability.circl.lu/vuln/cve-2025-10966CVE-2025-10966 — missing SFTP host verification with wolfSSH2026-10-01T21:55:07.830202+00:00
Affected: curl, Siemens RUGGEDCOM RST2428P
curl's code for managing SSH connections when SFTP was done using the wolfSSH
powered backend was flawed and missed host verification mechanisms.
This prevents curl from detecting MITM attackers and more.