The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - URLs containing percent-encoded slashes (`/` or `\`) can trick wcurl into saving the output file outside     of the current directory without the user explicitly asking for it. This flaw only affects the wcurl     command line tool. (CVE-2025-11563)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20090-1 advisory.

    - CVE-2025-9086: Fixed Out of bounds read for cookie path (bsc#1249191)
    - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)
    - CVE-2025-10148: Fixed predictable WebSocket mask (bsc#1249348)

    Other fixes:
    - tool_operate: fix return code when --retry is used but not       triggered (bsc#1249367)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of wcurl installed on the remote host is prior to 2025.11.04. It is, therefore, affected by a path traversal vulnerability when the URL contains a percent-encoded slash.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4300-1 advisory.

    - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8062-1 advisory.

    It was discovered that curl incorrectly handled cookies when redirected from secure to insecure     connections. An attacker could possibly use this issue to cause a denial of service, or obtain sensitive     information. This issue only affected Ubuntu 25.10. (CVE-2025-9086)

    Calvin Ruocco discovered that curl did not properly handle WebSocket communications under certain     circumstances. A malicious server could possibly use this issue to poison proxy caches with malicious     content. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-10148)

    Stanislav Fort discovered that wcurl did not properly handle URLs with certain encoded characters. If a     user were tricked into processing a specially crafted URL, an attacker could possibly use this issue to     write files outside the intended directory. This issue only affected Ubuntu 25.10. (CVE-2025-11563)

    Stanislav Fort discovered that curl did not properly validate pinned public keys under certain     circumstances. A remote attacker could possibly use this issue to perform a machine-in-the-middle attack.
    This issue only affected Ubuntu 25.10.(CVE-2025-13034)

    Stanislav Fort discovered that curl did not properly manage TLS options when performing LDAP over TLS     transfers in multi-threaded environments. Under certain circumstances, certificate verification could be     unintentionally and unknowingly disabled. (CVE-2025-14017)

    It was discovered that curl incorrectly handled Oauth2 bearer tokens when following redirects. A remote     attacker could possibly use this issue to obtain authentication credentials. (CVE-2025-14524)

    Stanislav Fort discovered that curl did not properly validate TLS certificates when reusing connections. A     remote attacker could possibly use this issue to bypass expected certificate verification. This issue only     affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-14819)

    Harry Sintonen discovered that curl did not properly validate SSH host keys when performing SSH-based file     transfers. This issue could lead to unintended bypass of custom known_hosts file. This issue only affected     Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-15079)

    Harry Sintonen discovered that curl built with libssh did not properly handle authentication when     performing SSH-based file transfers. This could result in unintended authentication operations. This issue     only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-15224)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:4236-1 advisory.

    - CVE-2025-11563: Fixed wcurl path traversal with percent-encoded slashes (bsc#1253757)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is prior to 8.3.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-3088 advisory.

    wcurl path traversal with percent-encoded slashes

    URLs containing percent-encoded slashes (/ or \) can trick wcurl into saving the output file outside of     the current directory without the user explicitly asking for it. (CVE-2025-11563)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1317 advisory.

    wcurl path traversal with percent-encoded slashes

    URLs containing percent-encoded slashes (/ or \) can trick wcurl into saving the output file outside of     the current directory without the user explicitly asking for it. (CVE-2025-11563)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
272263	Linux Distros Unpatched Vulnerability : CVE-2025-11563	Nessus	Misc.	11/4/2025	2/28/2026	medium
277017	openSUSE 16 Security Update : curl (openSUSE-SU-2025-20090-1)	Nessus	SuSE Local Security Checks	12/2/2025	3/3/2026	medium
274434	wcurl 2024.12.08 < 2025.11.04 Path Traversal	Nessus	MacOS X Local Security Checks	11/7/2025	1/21/2026	high
277251	SUSE SLED15 / SLES15 Security Update : curl (SUSE-SU-2025:4300-1)	Nessus	SuSE Local Security Checks	12/3/2025	2/27/2026	medium
300431	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : curl vulnerabilities (USN-8062-1)	Nessus	Ubuntu Local Security Checks	3/3/2026	4/30/2026	medium
276906	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : curl (SUSE-SU-2025:4236-1)	Nessus	SuSE Local Security Checks	11/26/2025	3/3/2026	medium
277769	Amazon Linux 2 : curl, --advisory ALAS2-2025-3088 (ALAS-2025-3088)	Nessus	Amazon Linux Local Security Checks	12/8/2025	2/27/2026	medium
277810	Amazon Linux 2023 : curl, curl-minimal, libcurl (ALAS2023-2025-1317)	Nessus	Amazon Linux Local Security Checks	12/9/2025	2/27/2026	medium

Detections

Analytics

Plugins Search

medium

medium

high

medium

medium

medium

medium

medium