CVE-2026-86410
Discovered by AISLEPUBLISHEDCWE-297
Description
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect.
CVSS Base Scores
CVSS v3.1(Primary)
7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Version | Status |
|---|---|---|---|
| curl | — | — |