AZL-109962
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-109962.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-109962
- Upstream
- CVE-2026-86410
- Published
- 2026-10-20T20:17:25Z
- Modified
- 2026-10-30T05:35:37Z
- Summary
- CVE-2026-86410 affecting package curl 8.11.1-11
- Details
-
A flaw in the curl command line tool's logic makes it only set SSH host verification options when interacting directly using SFTP or SCP, and not as a result of following a redirect.
- References