Vulnerability-Lookup

CVE-2026-86410 (GCVE-0-2026-86410)

Vulnerability from cvelistv5 – Published: 2026-10-20 19:59 – Updated: 2026-10-20 19:59

Title

redirect to SFTP or SCP bypasses host verification

Summary

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect.

Severity

No CVSS data available.

CWE

CWE-297 Improper Validation of Certificate with Host Mismatch

Assigner

curl CNA under the redhat root

CNA scorecard D 46/100 over 59 records in the last 180 days details

References

3 references

URL	Tags
https://curl.se/docs/CVE-2026-86410.json
https://curl.se/docs/CVE-2026-86410.html
https://hackerone.com/reports/3973176

Impacted products

1 product

Vendor	Product	Version	CPE status
curl	curl	Affected: 8.22.0 , ≤ 8.22.0 (semver) Affected: 8.21.0 , ≤ 8.21.0 (semver) Affected: 8.20.0 , ≤ 8.20.0 (semver) Affected: 8.19.0 , ≤ 8.19.0 (semver) Affected: 8.18.0 , ≤ 8.18.0 (semver) Affected: 8.17.0 , ≤ 8.17.0 (semver) Affected: 8.16.0 , ≤ 8.16.0 (semver) Affected: 8.15.0 , ≤ 8.15.0 (semver) Affected: 8.14.1 , ≤ 8.14.1 (semver) Affected: 8.14.0 , ≤ 8.14.0 (semver) Affected: 8.13.0 , ≤ 8.13.0 (semver) Affected: 8.12.1 , ≤ 8.12.1 (semver) Affected: 8.12.0 , ≤ 8.12.0 (semver) Affected: 8.11.1 , ≤ 8.11.1 (semver) Affected: 8.11.0 , ≤ 8.11.0 (semver) Affected: 8.10.1 , ≤ 8.10.1 (semver) Affected: 8.10.0 , ≤ 8.10.0 (semver) Affected: 8.9.1 , ≤ 8.9.1 (semver) Affected: 8.9.0 , ≤ 8.9.0 (semver) Affected: 8.8.0 , ≤ 8.8.0 (semver) Affected: 8.7.1 , ≤ 8.7.1 (semver) Affected: 8.7.0 , ≤ 8.7.0 (semver) Affected: 8.6.0 , ≤ 8.6.0 (semver) Affected: 8.5.0 , ≤ 8.5.0 (semver) Affected: 8.4.0 , ≤ 8.4.0 (semver) Affected: 8.3.0 , ≤ 8.3.0 (semver) Affected: 8.2.1 , ≤ 8.2.1 (semver) Affected: 8.2.0 , ≤ 8.2.0 (semver) Affected: 8.1.2 , ≤ 8.1.2 (semver) Affected: 8.1.1 , ≤ 8.1.1 (semver) Affected: 8.1.0 , ≤ 8.1.0 (semver) Affected: 8.0.1 , ≤ 8.0.1 (semver) Affected: 8.0.0 , ≤ 8.0.0 (semver) Affected: 7.88.1 , ≤ 7.88.1 (semver) Affected: 7.88.0 , ≤ 7.88.0 (semver) Affected: 7.87.0 , ≤ 7.87.0 (semver) Affected: 7.86.0 , ≤ 7.86.0 (semver) Affected: 7.85.0 , ≤ 7.85.0 (semver) Affected: 7.84.0 , ≤ 7.84.0 (semver) Affected: 7.83.1 , ≤ 7.83.1 (semver) Affected: 7.83.0 , ≤ 7.83.0 (semver) Affected: 7.82.0 , ≤ 7.82.0 (semver) Affected: 7.81.0 , ≤ 7.81.0 (semver)	guessed

Credits

Stanislav Fort (Aisle Research) Daniel Stenberg

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.22.0",
              "status": "affected",
              "version": "8.22.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.21.0",
              "status": "affected",
              "version": "8.21.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.20.0",
              "status": "affected",
              "version": "8.20.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.19.0",
              "status": "affected",
              "version": "8.19.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.18.0",
              "status": "affected",
              "version": "8.18.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.17.0",
              "status": "affected",
              "version": "8.17.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.16.0",
              "status": "affected",
              "version": "8.16.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.15.0",
              "status": "affected",
              "version": "8.15.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.1",
              "status": "affected",
              "version": "8.14.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.0",
              "status": "affected",
              "version": "8.14.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.13.0",
              "status": "affected",
              "version": "8.13.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.1",
              "status": "affected",
              "version": "8.12.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.0",
              "status": "affected",
              "version": "8.12.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.1",
              "status": "affected",
              "version": "8.11.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.0",
              "status": "affected",
              "version": "8.11.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Stanislav Fort (Aisle Research)"
        },
        {
          "lang": "en",
          "type": "remediation developer",
          "value": "Daniel Stenberg"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw in the curl command line tool\u0027s logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-297 Improper Validation of Certificate with Host Mismatch",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-20T19:59:26.502Z",
        "orgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "shortName": "curl"
      },
      "references": [
        {
          "name": "json",
          "url": "https://curl.se/docs/CVE-2026-86410.json"
        },
        {
          "name": "www",
          "url": "https://curl.se/docs/CVE-2026-86410.html"
        },
        {
          "name": "issue",
          "url": "https://hackerone.com/reports/3973176"
        }
      ],
      "title": "redirect to SFTP or SCP bypasses host verification"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9",
    "assignerShortName": "curl",
    "cveId": "CVE-2026-86410",
    "datePublished": "2026-10-20T19:59:26.502Z",
    "dateReserved": "2026-09-07T12:11:46.874Z",
    "dateUpdated": "2026-10-20T19:59:26.502Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-86410",
      "date": "2026-10-21",
      "epss": "0.00275",
      "percentile": "0.1887"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "curl",
                "vendor": "curl",
                "versions": [
                  {
                    "lessThanOrEqual": "8.22.0",
                    "status": "affected",
                    "version": "8.22.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.21.0",
                    "status": "affected",
                    "version": "8.21.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.20.0",
                    "status": "affected",
                    "version": "8.20.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.19.0",
                    "status": "affected",
                    "version": "8.19.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.18.0",
                    "status": "affected",
                    "version": "8.18.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.17.0",
                    "status": "affected",
                    "version": "8.17.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.16.0",
                    "status": "affected",
                    "version": "8.16.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.15.0",
                    "status": "affected",
                    "version": "8.15.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.14.1",
                    "status": "affected",
                    "version": "8.14.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.14.0",
                    "status": "affected",
                    "version": "8.14.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.13.0",
                    "status": "affected",
                    "version": "8.13.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.12.1",
                    "status": "affected",
                    "version": "8.12.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.12.0",
                    "status": "affected",
                    "version": "8.12.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.11.1",
                    "status": "affected",
                    "version": "8.11.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.11.0",
                    "status": "affected",
                    "version": "8.11.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.10.1",
                    "status": "affected",
                    "version": "8.10.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.10.0",
                    "status": "affected",
                    "version": "8.10.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.9.1",
                    "status": "affected",
                    "version": "8.9.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.9.0",
                    "status": "affected",
                    "version": "8.9.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.8.0",
                    "status": "affected",
                    "version": "8.8.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.7.1",
                    "status": "affected",
                    "version": "8.7.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.7.0",
                    "status": "affected",
                    "version": "8.7.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.6.0",
                    "status": "affected",
                    "version": "8.6.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.5.0",
                    "status": "affected",
                    "version": "8.5.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.4.0",
                    "status": "affected",
                    "version": "8.4.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.3.0",
                    "status": "affected",
                    "version": "8.3.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.2.1",
                    "status": "affected",
                    "version": "8.2.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.2.0",
                    "status": "affected",
                    "version": "8.2.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.1.2",
                    "status": "affected",
                    "version": "8.1.2",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.1.1",
                    "status": "affected",
                    "version": "8.1.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.1.0",
                    "status": "affected",
                    "version": "8.1.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.0.1",
                    "status": "affected",
                    "version": "8.0.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "8.0.0",
                    "status": "affected",
                    "version": "8.0.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.88.1",
                    "status": "affected",
                    "version": "7.88.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.88.0",
                    "status": "affected",
                    "version": "7.88.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.87.0",
                    "status": "affected",
                    "version": "7.87.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.86.0",
                    "status": "affected",
                    "version": "7.86.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.85.0",
                    "status": "affected",
                    "version": "7.85.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.84.0",
                    "status": "affected",
                    "version": "7.84.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.83.1",
                    "status": "affected",
                    "version": "7.83.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.83.0",
                    "status": "affected",
                    "version": "7.83.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.82.0",
                    "status": "affected",
                    "version": "7.82.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.81.0",
                    "status": "affected",
                    "version": "7.81.0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw in the curl command line tool\u0027s logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."
          }
        ],
        "id": "CVE-2026-86410",
        "lastModified": "2026-10-20T20:17:25.380",
        "metrics": {},
        "published": "2026-10-20T20:17:25.380",
        "references": [
          {
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "url": "https://curl.se/docs/CVE-2026-86410.html"
          },
          {
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "url": "https://curl.se/docs/CVE-2026-86410.json"
          },
          {
            "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
            "url": "https://hackerone.com/reports/3973176"
          }
        ],
        "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9",
        "vulnStatus": "Received"
      }
    }
  }
}

CERTFR-2026-AVI-1307

Vulnerability from certfr_avis - Published: 2026-10-14 - Updated: 2026-10-14

De multiples vulnérabilités ont été découvertes dans Curl. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

	Vendor	Product	Description
	Curl	cURL et libcurl	Curl versions antérieures à 8.23.0

References

Title

Publication Time

FKIE_CVE-2026-86410

Vulnerability from fkie_nvd - Published: 2026-10-20 20:17 - Updated: 2026-10-20 20:17

Severity

Summary

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect.

References

	URL	Tags
	2499f714-1537-4658-8207-48ae4bb9eae9	https://curl.se/docs/CVE-2026-86410.html
	2499f714-1537-4658-8207-48ae4bb9eae9	https://curl.se/docs/CVE-2026-86410.json
	2499f714-1537-4658-8207-48ae4bb9eae9	https://hackerone.com/reports/3973176

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "curl",
          "vendor": "curl",
          "versions": [
            {
              "lessThanOrEqual": "8.22.0",
              "status": "affected",
              "version": "8.22.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.21.0",
              "status": "affected",
              "version": "8.21.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.20.0",
              "status": "affected",
              "version": "8.20.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.19.0",
              "status": "affected",
              "version": "8.19.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.18.0",
              "status": "affected",
              "version": "8.18.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.17.0",
              "status": "affected",
              "version": "8.17.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.16.0",
              "status": "affected",
              "version": "8.16.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.15.0",
              "status": "affected",
              "version": "8.15.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.1",
              "status": "affected",
              "version": "8.14.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.14.0",
              "status": "affected",
              "version": "8.14.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.13.0",
              "status": "affected",
              "version": "8.13.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.1",
              "status": "affected",
              "version": "8.12.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.12.0",
              "status": "affected",
              "version": "8.12.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.1",
              "status": "affected",
              "version": "8.11.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.11.0",
              "status": "affected",
              "version": "8.11.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.1",
              "status": "affected",
              "version": "8.10.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.10.0",
              "status": "affected",
              "version": "8.10.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.1",
              "status": "affected",
              "version": "8.9.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.9.0",
              "status": "affected",
              "version": "8.9.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.8.0",
              "status": "affected",
              "version": "8.8.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.1",
              "status": "affected",
              "version": "8.7.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.7.0",
              "status": "affected",
              "version": "8.7.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.6.0",
              "status": "affected",
              "version": "8.6.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.5.0",
              "status": "affected",
              "version": "8.5.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.4.0",
              "status": "affected",
              "version": "8.4.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.3.0",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.1",
              "status": "affected",
              "version": "8.2.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.2.0",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.2",
              "status": "affected",
              "version": "8.1.2",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.1",
              "status": "affected",
              "version": "8.1.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.1.0",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.1",
              "status": "affected",
              "version": "8.0.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "8.0.0",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.1",
              "status": "affected",
              "version": "7.88.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.88.0",
              "status": "affected",
              "version": "7.88.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.87.0",
              "status": "affected",
              "version": "7.87.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.86.0",
              "status": "affected",
              "version": "7.86.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.85.0",
              "status": "affected",
              "version": "7.85.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.84.0",
              "status": "affected",
              "version": "7.84.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.1",
              "status": "affected",
              "version": "7.83.1",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.83.0",
              "status": "affected",
              "version": "7.83.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.82.0",
              "status": "affected",
              "version": "7.82.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.81.0",
              "status": "affected",
              "version": "7.81.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "2499f714-1537-4658-8207-48ae4bb9eae9"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw in the curl command line tool\u0027s logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect."
    }
  ],
  "id": "CVE-2026-86410",
  "lastModified": "2026-10-20T20:17:25.380",
  "metrics": {},
  "published": "2026-10-20T20:17:25.380",
  "references": [
    {
      "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
      "url": "https://curl.se/docs/CVE-2026-86410.html"
    },
    {
      "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
      "url": "https://curl.se/docs/CVE-2026-86410.json"
    },
    {
      "source": "2499f714-1537-4658-8207-48ae4bb9eae9",
      "url": "https://hackerone.com/reports/3973176"
    }
  ],
  "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9",
  "vulnStatus": "Received"
}

GHSA-4FMG-FM23-J6FC

Vulnerability from github – Published: 2026-10-20 21:31 – Updated: 2026-10-20 21:31

Details

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect.

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-86410"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-10-20T20:17:25Z",
    "severity": null
  },
  "details": "A flaw in the curl command line tool\u0027s logic makes it only set SSH host\nverification options when interacting directly using SFTP or SCP, and not as a\nresult of following a redirect.",
  "id": "GHSA-4fmg-fm23-j6fc",
  "modified": "2026-10-20T21:31:03Z",
  "published": "2026-10-20T21:31:03Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-86410"
    },
    {
      "type": "WEB",
      "url": "https://hackerone.com/reports/3973176"
    },
    {
      "type": "WEB",
      "url": "https://curl.se/docs/CVE-2026-86410.html"
    },
    {
      "type": "WEB",
      "url": "https://curl.se/docs/CVE-2026-86410.json"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

OPENSUSE-SU-2026:12150-1

Vulnerability from csaf_opensuse - Published: 2026-10-16 00:00 - Updated: 2026-10-21 11:52

Summary

curl-8.23.0-1.1 on GA media

Severity

Moderate

Scope

23 vulnerabilities in this advisory, including CVE-2026-86410.

CVE-2026-86410

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Recommended: 36 products

Open the full advisory

RHSA-2026:82895

Vulnerability from csaf_redhat - Published: 2026-10-14 11:39 - Updated: 2026-10-17 12:55

Summary

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Severity

Important

Scope

26 vulnerabilities in this advisory, including CVE-2026-86410.

CVE-2026-86410

A flaw was found in the curl command-line tool. When configured to follow redirects to Secure File Transfer Protocol (SFTP) or Secure Copy Protocol (SCP) destinations, curl fails to apply user-specified Secure Shell (SSH) host verification settings. A malicious server can exploit this flaw by redirecting requests to an untrusted server, causing the connection to proceed without validating the remote host's identity. This failure can enable an attacker to intercept communications, leading to sensitive information disclosure.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N

Fixed: 13 products

https://access.redhat.com/errata/RHSA-2026:82895

Open the full advisory

UBUNTU-CVE-2026-86410 (CVE-2026-86410)

Vulnerability from osv_ubuntu – Published: 2026-10-14 06:00 – Updated: 2026-10-19 20:34 – Source website

Details

A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect. This means --knownhosts, --hostpubsha256, and --hostpubmd5 are never installed when the initial URL is HTTPS. If --location and --proto-redir +sftp is used and the server returns a Location: sftp://example.com redirect, the SFTP connection proceeds without any of the user's requested SSH host verification methods.

Severity

N/A (UNKNOWN)

low

References

URL

Type

	https://ubuntu.com/security/CVE-2026-86410	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-86410	REPORT
	https://curl.se/docs/CVE-2026-86410.html	REPORT
	https://ubuntu.com/security/notices/USN-8927-1	ADVISORY
	https://ubuntu.com/security/notices/USN-8927-2	ADVISORY

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "curl",
            "binary_version": "8.20.0-2ubuntu11.1"
          },
          {
            "binary_name": "libcurl3t64-gnutls",
            "binary_version": "8.20.0-2ubuntu11.1"
          },
          {
            "binary_name": "libcurl4t64",
            "binary_version": "8.20.0-2ubuntu11.1"
          }
        ],
        "priority_reason": "Upstream defined this as low severity"
      },
      "package": {
        "ecosystem": "Ubuntu:26.10",
        "name": "curl",
        "purl": "pkg:deb/ubuntu/curl@8.20.0-2ubuntu11.1?arch=source\u0026distro=stonking"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.20.0-2ubuntu11.1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.18.0-1ubuntu2",
        "8.20.0-2ubuntu1",
        "8.20.0-2ubuntu3",
        "8.20.0-2ubuntu10",
        "8.20.0-2ubuntu11"
      ]
    },
    {
      "ecosystem_specific": {
        "availability": "No subscription required",
        "binaries": [
          {
            "binary_name": "curl",
            "binary_version": "8.18.0-1ubuntu2.8"
          },
          {
            "binary_name": "libcurl3t64-gnutls",
            "binary_version": "8.18.0-1ubuntu2.8"
          },
          {
            "binary_name": "libcurl4t64",
            "binary_version": "8.18.0-1ubuntu2.8"
          }
        ],
        "priority_reason": "Upstream defined this as low severity"
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "curl",
        "purl": "pkg:deb/ubuntu/curl@8.18.0-1ubuntu2.8?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "8.18.0-1ubuntu2.8"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8.14.1-2ubuntu1",
        "8.17.0-1ubuntu1",
        "8.18.0-1ubuntu1",
        "8.18.0-1ubuntu2",
        "8.18.0-1ubuntu2.1",
        "8.18.0-1ubuntu2.2",
        "8.18.0-1ubuntu2.3",
        "8.18.0-1ubuntu2.4",
        "8.18.0-1ubuntu2.5",
        "8.18.0-1ubuntu2.7"
      ]
    }
  ],
  "aliases": [],
  "details": "A flaw in the curl command line tool\u0027s logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect. This means `--knownhosts`, `--hostpubsha256`, and `--hostpubmd5` are never installed when the initial URL is HTTPS. If `--location` and `--proto-redir +sftp` is used and the server returns a `Location: sftp://example.com` redirect, the SFTP connection proceeds without any of the user\u0027s requested SSH host verification methods.",
  "id": "UBUNTU-CVE-2026-86410",
  "modified": "2026-10-19T20:34:17Z",
  "published": "2026-10-14T06:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-86410"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-86410"
    },
    {
      "type": "REPORT",
      "url": "https://curl.se/docs/CVE-2026-86410.html"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8927-1"
    },
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-8927-2"
    }
  ],
  "related": [
    "USN-8927-1",
    "USN-8927-2"
  ],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "low",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-86410"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-86410 (GCVE-0-2026-86410)

CERTFR-2026-AVI-1307

Solutions

FKIE_CVE-2026-86410

GHSA-4FMG-FM23-J6FC

OPENSUSE-SU-2026:12150-1

RHSA-2026:82895

UBUNTU-CVE-2026-86410 (CVE-2026-86410)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour