Description
A flaw in the curl command line tool's logic makes it only set SSH host
verification options when interacting directly using SFTP or SCP, and not as a
result of following a redirect.
Published: 2026-10-20
Score: 6.8 Medium
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Ubuntu USN Ubuntu USN USN-8927-1 curl vulnerabilities
Ubuntu USN Ubuntu USN USN-8927-2 curl vulnerabilities
History

Tue, 20 Oct 2026 20:15:00 +0000

Type Values Removed Values Added
Description A flaw was found in the curl command-line tool. When configured to follow redirects to Secure File Transfer Protocol (SFTP) or Secure Copy Protocol (SCP) destinations, curl fails to apply user-specified Secure Shell (SSH) host verification settings. A malicious server can exploit this flaw by redirecting requests to an untrusted server, causing the connection to proceed without validating the remote host's identity. This failure can enable an attacker to intercept communications, leading to sensitive information disclosure. A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect.
Title curl: curl: redirect to SFTP or SCP bypasses host verification redirect to SFTP or SCP bypasses host verification
References

Sun, 18 Oct 2026 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Curl
Curl curl
Vendors & Products Curl
Curl curl

Fri, 16 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Description A flaw was found in the curl command-line tool. When configured to follow redirects to Secure File Transfer Protocol (SFTP) or Secure Copy Protocol (SCP) destinations, curl fails to apply user-specified Secure Shell (SSH) host verification settings. A malicious server can exploit this flaw by redirecting requests to an untrusted server, causing the connection to proceed without validating the remote host's identity. This failure can enable an attacker to intercept communications, leading to sensitive information disclosure.
Title curl: curl: redirect to SFTP or SCP bypasses host verification
First Time appeared Redhat
Redhat hummingbird
Weaknesses CWE-297
CPEs cpe:/a:redhat:hummingbird:1
Vendors & Products Redhat
Redhat hummingbird
References
Metrics threat_severity

None

 cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N'}

threat_severity

Low

Subscriptions

Curl Curl
Redhat Hummingbird
cve-icon MITRE

Status: PUBLISHED

Assigner: curl

Published:

Updated: 2026-10-20T19:59:26.502Z

Reserved: 2026-09-07T12:11:46.874Z

Link: CVE-2026-86410

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-20T20:17:25.380

Modified: 2026-10-22T17:21:57.293

Link: CVE-2026-86410

cve-icon Redhat

Severity : Low

Publid Date: 2026-10-14T12:00:00Z

Links: CVE-2026-86410 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-18T19:45:16Z

Weaknesses