CVE-2026-87865

Published: Ott 20, 2026 Last Modified: Ott 20, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated
initial entry can cause host key validation to report a key *mismatch* as a
*missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback.

https://curl.se/docs/CVE-2026-87865.html
https://curl.se/docs/CVE-2026-87865.html
https://curl.se/docs/CVE-2026-87865.json
https://curl.se/docs/CVE-2026-87865.json
https://hackerone.com/reports/3975408
https://hackerone.com/reports/3975408