EulerOS 2.0 SP10 : curl (EulerOS-SA-2026-1044)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. Th...

CVE-2025-10966

CVE-2025-10966 affects curl when SFTP is performed using the wolfSSH backend. The root cause is that the SSH connection management code missed host verification mechanisms , meaning the remote host is not properly authenticated during key exchange. This allows a remote attacker to perform a man-i...

CVE-2025-10966 missing SFTP host verification with wolfSSH

curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more...