ByteOS Network

CVE Vulnerability Details :

CVE-2026-9547

PUBLISHED

More Info Official Page

Assigner-curl

Assigner Org ID-2499f714-1537-4658-8207-48ae4bb9eae9

Published At-03 Jul, 2026 | 06:18

Updated At-03 Jul, 2026 | 06:18

▼CVE Numbering Authority (CNA)

SSH improper host validation

When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an untrusted server. This vulnerability occurs when a server presents a host key type that does not match the specific key type already recorded for that host in the `known_hosts` file. Instead of rejecting the mismatch, the callback mechanism fails to properly enforce the restriction, allowing the connection to succeed without warning and risking a potential man-in-the-middle attack.

Affected Products

Vendor

CURL

Product

curl

Default Status

unaffected

Versions

Affected

From 8.20.0 through 8.20.0 (semver)
From 8.19.0 through 8.19.0 (semver)
From 8.18.0 through 8.18.0 (semver)
From 8.17.0 through 8.17.0 (semver)
From 8.16.0 through 8.16.0 (semver)
From 8.15.0 through 8.15.0 (semver)
From 8.14.1 through 8.14.1 (semver)
From 8.14.0 through 8.14.0 (semver)
From 8.13.0 through 8.13.0 (semver)
From 8.12.1 through 8.12.1 (semver)
From 8.12.0 through 8.12.0 (semver)
From 8.11.1 through 8.11.1 (semver)
From 8.11.0 through 8.11.0 (semver)
From 8.10.1 through 8.10.1 (semver)
From 8.10.0 through 8.10.0 (semver)
From 8.9.1 through 8.9.1 (semver)
From 8.9.0 through 8.9.0 (semver)
From 8.8.0 through 8.8.0 (semver)
From 8.7.1 through 8.7.1 (semver)
From 8.7.0 through 8.7.0 (semver)
From 8.6.0 through 8.6.0 (semver)
From 8.5.0 through 8.5.0 (semver)
From 8.4.0 through 8.4.0 (semver)
From 8.3.0 through 8.3.0 (semver)
From 8.2.1 through 8.2.1 (semver)
From 8.2.0 through 8.2.0 (semver)
From 8.1.2 through 8.1.2 (semver)
From 8.1.1 through 8.1.1 (semver)
From 8.1.0 through 8.1.0 (semver)
From 8.0.1 through 8.0.1 (semver)
From 8.0.0 through 8.0.0 (semver)
From 7.88.1 through 7.88.1 (semver)
From 7.88.0 through 7.88.0 (semver)
From 7.87.0 through 7.87.0 (semver)
From 7.86.0 through 7.86.0 (semver)
From 7.85.0 through 7.85.0 (semver)
From 7.84.0 through 7.84.0 (semver)
From 7.83.1 through 7.83.1 (semver)
From 7.83.0 through 7.83.0 (semver)
From 7.82.0 through 7.82.0 (semver)
From 7.81.0 through 7.81.0 (semver)
From 7.80.0 through 7.80.0 (semver)
From 7.79.1 through 7.79.1 (semver)
From 7.79.0 through 7.79.0 (semver)
From 7.78.0 through 7.78.0 (semver)
From 7.77.0 through 7.77.0 (semver)
From 7.76.1 through 7.76.1 (semver)
From 7.76.0 through 7.76.0 (semver)
From 7.75.0 through 7.75.0 (semver)
From 7.74.0 through 7.74.0 (semver)
From 7.73.0 through 7.73.0 (semver)
From 7.72.0 through 7.72.0 (semver)
From 7.71.1 through 7.71.1 (semver)
From 7.71.0 through 7.71.0 (semver)
From 7.70.0 through 7.70.0 (semver)
From 7.69.1 through 7.69.1 (semver)
From 7.69.0 through 7.69.0 (semver)

Problem Types

Type	CWE ID	Description
N/A	N/A	CWE-297 Improper Validation of Certificate with Host Mismatch

Type: N/A

CWE ID: N/A

Description: CWE-297 Improper Validation of Certificate with Host Mismatch

Credits

finder

Joshua Rogers (Aisle Research)

remediation developer

Joshua Rogers (Aisle Research)

References

Hyperlink	Resource
https://curl.se/docs/CVE-2026-9547.json	N/A
https://curl.se/docs/CVE-2026-9547.html	N/A
https://hackerone.com/reports/3751712	N/A

Hyperlink: https://curl.se/docs/CVE-2026-9547.json

Resource: N/A

Hyperlink: https://curl.se/docs/CVE-2026-9547.html

Resource: N/A

Hyperlink: https://hackerone.com/reports/3751712

Resource: N/A

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References