Detections
Analytics
Curl 7.58.0 < 8.18.0 Multiple Vulnerabilities
medium Nessus Plugin ID 291361
Synopsis
The remote host has a program that is affected by multiple vulnerabilitiesDescription
The version of curl installed on the remote host is 7.58 <= 8.17.0. It is, therefore, affected by multiple vulnerabilities when built with the libssh backend:- A key passphrase bypass vulnerability exists where curl wrongly authenticates using a locally running SSH agent even when specifically asked to perform public key authentication. (CVE-2025-15224)
- A global known_hosts override vulnerability exists where libcurl may mistakenly accept connections to hosts not present in a specified known_hosts file if they are recognized in the libssh global known_hosts file. (CVE-2025-15079)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade Curl to version 8.18.0 or laterSee Also
Plugin Details
Severity: Medium
ID: 291361
File Name: curl_8_17_0.nasl
Version: 1.1
Type: local
Agent: windows, macosx, unix
Family: Misc.
Published: 1/19/2026
Updated: 1/19/2026
Configuration: Enable thorough checks (optional)
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5.4
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:N/A:N
CVSS Score Source: CVE-2025-15079
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
Vulnerability Information
CPE: cpe:/a:haxx:curl
Required KB Items: installed_sw/Curl
Patch Publication Date: 1/7/2026
Vulnerability Publication Date: 1/7/2026
Reference Information
CVE: CVE-2025-15079, CVE-2025-15224
IAVA: 2026-A-0005