Lucene search
+L

curl: curl: Man-in-the-middle attack via SSH host key bypass

🗓️ 17 Aug 2026 06:40:40Reported by RedHatType 
redhat
 redhat
🔗 access.redhat.com👁 7 Views

libcurl silently accepts untrusted SSH servers when host key type mismatches, enabling man-in-the-middle attacks.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
attackerkb
ATTACKERKB
CVE-2026-9547
3 Jul 202606:18
attackerkb
alpinelinux
AlpineLinux
CVE-2026-9547
3 Jul 202606:18
alpinelinux
almalinux
AlmaLinux
Important: curl security update
17 Aug 202600:00
almalinux
cgr
Chainguard
CVE-2026-9547 vulnerabilities
29 Jul 202602:16
cgr
circl
Circl
CVE-2026-9547
3 Jul 202609:59
circl
curl
curl security advisories
SSH improper host validation
24 Jun 202608:00
curl
aix
IBM AIX
Multiple vulnerabilities impacts AIX due to cURL libcurl (CVE-2026-10536 CVE-2026-11856 CVE-2026-8286 CVE-2026-8458 CVE-2026-8924 CVE-2026-8927 CVE-2026-8932 CVE-2026-9547)
28 Jul 202605:27
aix
cve
CVE
CVE-2026-9547
3 Jul 202606:18
cve
cvelist
Cvelist
CVE-2026-9547 SSH improper host validation
3 Jul 202606:18
cvelist
debiancve
Debian CVE
CVE-2026-9547
3 Jul 202606:18
debiancve
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Red Hat Enterprise Linux9.8aarch64curl7.76.1-40.el9_8.5curl-7.76.1-40.el9_8.5.aarch64.rpm
Red Hat Enterprise Linux9.8ppc64lecurl7.76.1-40.el9_8.5curl-7.76.1-40.el9_8.5.ppc64le.rpm
Red Hat Enterprise Linux9.8s390xcurl7.76.1-40.el9_8.5curl-7.76.1-40.el9_8.5.s390x.rpm
Red Hat Enterprise Linux9.8x86_64curl7.76.1-40.el9_8.5curl-7.76.1-40.el9_8.5.x86_64.rpm
Red Hat Enterprise Linux9.8aarch64curl-debuginfo7.76.1-40.el9_8.5curl-debuginfo-7.76.1-40.el9_8.5.aarch64.rpm
Red Hat Enterprise Linux9.8i686curl-debuginfo7.76.1-40.el9_8.5curl-debuginfo-7.76.1-40.el9_8.5.i686.rpm
Red Hat Enterprise Linux9.8ppc64lecurl-debuginfo7.76.1-40.el9_8.5curl-debuginfo-7.76.1-40.el9_8.5.ppc64le.rpm
Red Hat Enterprise Linux9.8s390xcurl-debuginfo7.76.1-40.el9_8.5curl-debuginfo-7.76.1-40.el9_8.5.s390x.rpm
Red Hat Enterprise Linux9.8x86_64curl-debuginfo7.76.1-40.el9_8.5curl-debuginfo-7.76.1-40.el9_8.5.x86_64.rpm
Red Hat Enterprise Linux9.8aarch64curl-debugsource7.76.1-40.el9_8.5curl-debugsource-7.76.1-40.el9_8.5.aarch64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 2026 09:00Current
5Medium risk
Vulners AI Score5
CVSS 3.17.4
EPSS0.00325
SSVC
7