When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey` with the curl tool,curl should check the public key of the server certificate to verify the peer. This check was skipped in a certain condition that would then make curl allow the connection without performing the proper check, thus not noticing a possible impostor. To skip this check, the connection had to be done with QUIC with ngtcp2 built to use GnuTLS and the user had to explicitly disable the standard certificate verification.

An update of the curl package has been released.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.5.3. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2026-02 advisory.

  - A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects     the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest     Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix     this issue. The associated identifier of this vulnerability is VDB-248999. (CVE-2023-7104)

  - A use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under     certain circumstances when the XML schematron has the <sch:name path=.../> schema elements. This flaw     allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the     program's crash using libxml or other possible undefined behaviors. (CVE-2025-49794)

  - A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can     trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that     can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to     sensitive data being corrupted in memory. (CVE-2025-49796)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is missing a security update. It is, therefore, affected by an improper certificate validation vulnerability.

  - When using the CURLOPT_PINNEDPUBLICKEY option with libcurl or --pinnedpubkey with the curl tool,     the public key check should be performed to verify the server certificate peer.     However, this check is skipped if the connection uses QUIC with ngtcp2 built against GnuTLS and     the user has explicitly disabled standard certificate verification. This could allow     a connection to an impostor server without the intended public key verification.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is prior to 8.17.0 / 8.18.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2026-007-01 advisory.

    New curl packages are available for Slackware 15.0 and -current to fix security issues.

Tenable has extracted the preceding description block directly from the curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - When using `CURLOPT_PINNEDPUBLICKEY` option with libcurl or `--pinnedpubkey` with the curl tool,curl     should check the public key of the server certificate to verify the peer. This check was skipped in a     certain condition that would then make curl allow the connection without performing the proper check, thus     not noticing a possible impostor. To skip this check, the connection had to be done with QUIC with ngtcp2     built to use GnuTLS and the user had to explicitly disable the standard certificate verification.
    (CVE-2025-13034)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
297245	Photon OS 4.0: Curl PHSA-2026-4.0-0941	Nessus	PhotonOS Local Security Checks	medium
297102	Nessus Network Monitor < 6.5.3 Multiple Vulnerabilities (TNS-2026-02)	Nessus	Misc.	critical
291358	Curl 8.8.0 < 8.18.0 Improper Certificate Validation.	Nessus	Misc.	medium
282640	Photon OS 5.0: Curl PHSA-2026-5.0-0732	Nessus	PhotonOS Local Security Checks	medium
282347	Slackware Linux 15.0 / current curl Multiple Vulnerabilities (SSA:2026-007-01)	Nessus	Slackware Local Security Checks	critical
282310	Linux Distros Unpatched Vulnerability : CVE-2025-13034	Nessus	Misc.	medium

Detections

Analytics

CVE-2025-13034

medium

Tenable Plugins

medium

critical

medium

medium

critical

medium