According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,changing TLS options in one thread     would inadvertently change them globally and therefore possibly also affect other concurrently setup     transfers.Disabling certificate verification for a specific transfer could unintentionally disable the     feature for other threads as well.(CVE-2025-14017)

    When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol     redirect to a second URL that uses an IMAP, LDAP,POP3 or SMTP scheme, curl might wrongly pass on the     bearer token to the new target host.(CVE-2025-14524)

    When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could     still mistakenly accept connecting to hosts *not present* in the specified file if they were added as     recognized in the libssh *global* known_hosts file.(CVE-2025-15079)

    When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl     would wrongly still ask and authenticate using a locally running SSH agent.(CVE-2025-15224)

Tenable has extracted the preceding description block directly from the EulerOS curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,     changing TLS options in one thread would inadvertently change them globally     and therefore possibly also affect other concurrently setup transfers.

    Disabling certificate verification for a specific transfer could     unintentionally disable the feature for other threads as well.(CVE-2025-14017)

    When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer     performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP,     POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new     target host.(CVE-2025-14524)

    When doing SSH-based transfers using either SCP or SFTP, and asked to do     public key authentication, curl would wrongly still ask and authenticate using     a locally running SSH agent.(CVE-2025-15224)

    When doing SSH-based transfers using either SCP or SFTP, and setting the     known_hosts file, libcurl could still mistakenly accept connecting to hosts
    *not present* in the specified file if they were added as recognized in the     libssh *global* known_hosts file.(CVE-2025-15079)

Tenable has extracted the preceding description block directly from the EulerOS curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the curl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

    When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a cross-protocol     redirect to a second URL that uses an IMAP, LDAP,POP3 or SMTP scheme, curl might wrongly pass on the     bearer token to the new target host.(CVE-2025-14524)

    When doing SSH-based transfers using either SCP or SFTP, and setting the known_hosts file, libcurl could     still mistakenly accept connecting to hosts *not present* in the specified file if they were added as     recognized in the libssh *global* known_hosts file.(CVE-2025-15079)

    When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl     would wrongly still ask and authenticate using a locally running SSH agent.(CVE-2025-15224)

    When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,changing TLS options in one thread     would inadvertently change them globallyand therefore possibly also affect other concurrently setup     transfers.Disabling certificate verification for a specific transfer could unintentionally disable the     feature for other threads as well.(CVE-2025-14017)

Tenable has extracted the preceding description block directly from the EulerOS Virtualization curl security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004929 advisory.

    When doing SSH-based transfers using either SCP or SFTP, and asked to do     public key authentication, curl would wrongly still ask and authenticate using     a locally running SSH agent.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 22.04 LTS / 24.04 LTS / 25.10 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8062-1 advisory.

    It was discovered that curl incorrectly handled cookies when redirected from secure to insecure     connections. An attacker could possibly use this issue to cause a denial of service, or obtain sensitive     information. This issue only affected Ubuntu 25.10. (CVE-2025-9086)

    Calvin Ruocco discovered that curl did not properly handle WebSocket communications under certain     circumstances. A malicious server could possibly use this issue to poison proxy caches with malicious     content. This issue only affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-10148)

    Stanislav Fort discovered that wcurl did not properly handle URLs with certain encoded characters. If a     user were tricked into processing a specially crafted URL, an attacker could possibly use this issue to     write files outside the intended directory. This issue only affected Ubuntu 25.10. (CVE-2025-11563)

    Stanislav Fort discovered that curl did not properly validate pinned public keys under certain     circumstances. A remote attacker could possibly use this issue to perform a machine-in-the-middle attack.
    This issue only affected Ubuntu 25.10.(CVE-2025-13034)

    Stanislav Fort discovered that curl did not properly manage TLS options when performing LDAP over TLS     transfers in multi-threaded environments. Under certain circumstances, certificate verification could be     unintentionally and unknowingly disabled. (CVE-2025-14017)

    It was discovered that curl incorrectly handled Oauth2 bearer tokens when following redirects. A remote     attacker could possibly use this issue to obtain authentication credentials. (CVE-2025-14524)

    Stanislav Fort discovered that curl did not properly validate TLS certificates when reusing connections. A     remote attacker could possibly use this issue to bypass expected certificate verification. This issue only     affected Ubuntu 24.04 LTS and Ubuntu 25.10. (CVE-2025-14819)

    Harry Sintonen discovered that curl did not properly validate SSH host keys when performing SSH-based file     transfers. This issue could lead to unintended bypass of custom known_hosts file. This issue only affected     Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-15079)

    Harry Sintonen discovered that curl built with libssh did not properly handle authentication when     performing SSH-based file transfers. This could result in unintended authentication operations. This issue     only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2025-15224)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of curl installed on the remote host is prior to 8.3.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3173 advisory.

    curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed     and missed host verification mechanisms.

    This prevents curl from detecting MITM attackers and more. (CVE-2025-10966)

    broken TLS options for threaded LDAPS

    NOTE: https://curl.se/docs/CVE-2025-14017.htmlNOTE: Introduced with:
    https://github.com/curl/curl/commit/ccba0d10b6baf5c73cae8cf4fb3f29f0f55c5a34 (curl-7_17_0)NOTE: Fixed by:
    https://github.com/curl/curl/commit/39d1976b7f709a516e3243338ebc0443bdd8d56d (rc-8_18_0-1,     curl-8_18_0)NOTE: Built with OpenLDAP (only affects the legacy LDAP support) (CVE-2025-14017)

    bearer token leak on cross-protocol redirect

    NOTE: https://curl.se/docs/CVE-2025-14524.htmlNOTE: Introduced with:
    https://github.com/curl/curl/commit/06c1bea72faabb6fad4b7ef818aafaa336c9a7aa (curl-7_33_0)NOTE: Fixed by:
    https://github.com/curl/curl/commit/1a822275d333dc6da6043497160fd04c8fa48640 (rc-8_18_0-2, curl-8_18_0)     (CVE-2025-14524)

    OpenSSL partial chain store policy bypass

    NOTE: https://curl.se/docs/CVE-2025-14819.htmlNOTE: Introduced with:
    https://github.com/curl/curl/commit/3c16697ebd796f799227be293e8689aec5f8190d (curl-7_87_0)NOTE: Fixed by:
    https://github.com/curl/curl/commit/cd046f6c93b39d673a58c18648d8906e954c4f5d (rc-8_18_0-3, curl-8_18_0)     (CVE-2025-14819)

    libssh global knownhost override

    NOTE: https://curl.se/docs/CVE-2025-15079.htmlNOTE: Introduced with:
    https://github.com/curl/curl/commit/c92d2e14cfb0db662f958effd2ac86f995cf1b5a (curl-7_58_0)NOTE: Fixed by:
    https://github.com/curl/curl/commit/adca486c125d9a6d9565b9607a19dce803a8b479 (rc-8_18_0-3,     curl-8_18_0)NOTE: Debian builds with libssh2 for SSH backend (CVE-2025-15079)

    libssh key passphrase bypass without agent set

    NOTE: https://curl.se/docs/CVE-2025-15224.htmlNOTE: Introduced with:
    https://github.com/curl/curl/commit/c92d2e14cfb0db662f958effd2ac86f995cf1b5a (curl-7_58_0)NOTE: Fixed by:
    https://github.com/curl/curl/commit/16d5f2a5660c61cc27bd5f1c7f512391d1c927aa (curl-8_18_0)NOTE: Debian     builds with libssh2 for SSH backend (CVE-2025-15224)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0101 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-15224:
    When doing SSH-based transfers using either SCP or SFTP, and asked to do     public key authentication, curl would wrongly still ask and authenticate using     a locally running SSH agent.

    CVE-2025-15079:
    When doing SSH-based transfers using either SCP or SFTP, and setting the     known_hosts file, libcurl could still mistakenly accept connecting to hosts
    *not present* in the specified file if they were added as recognized in the     libssh *global* known_hosts file.

    CVE-2025-14819:
    When doing TLS related transfers with reused easy or multi handles and     altering the  `CURLSSLOPT_NO_PARTIALCHAIN` option, libcurl could accidentally     reuse a CA store cached in memory for which the partial chain option was     reversed. Contrary to the user's wishes and expectations. This could make     libcurl find and accept a trust chain that it otherwise would not.

    CVE-2025-14524:
    When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer     performs a cross-protocol redirect to a second URL that uses an IMAP, LDAP,     POP3 or SMTP scheme, curl might wrongly pass on the bearer token to the new     target host.

    CVE-2025-14017:
    When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,     changing TLS options in one thread would inadvertently change them globally     and therefore possibly also affect other concurrently setup transfers.

    Disabling certificate verification for a specific transfer could     unintentionally disable the feature for other threads as well.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
301620	EulerOS 2.0 SP13 : curl (EulerOS-SA-2026-1232)	Nessus	Huawei Local Security Checks	2026/3/10	2026/3/10	medium
302407	EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-1386)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	medium
302598	EulerOS Virtualization 2.10.0 : curl (EulerOS-SA-2026-1552)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	medium
296372	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: curl (UTSA-2026-004929)	Nessus	Unity Linux Local Security Checks	2026/1/23	2026/1/23	low
300431	Ubuntu 22.04 LTS / 24.04 LTS / 25.10 : curl vulnerabilities (USN-8062-1)	Nessus	Ubuntu Local Security Checks	2026/3/3	2026/4/30	medium
299549	Amazon Linux 2 : curl, --advisory ALAS2-2026-3173 (ALAS-2026-3173)	Nessus	Amazon Linux Local Security Checks	2026/2/19	2026/4/30	medium
302387	EulerOS 2.0 SP12 : curl (EulerOS-SA-2026-1355)	Nessus	Huawei Local Security Checks	2026/3/16	2026/3/16	medium
300436	TencentOS Server 4: curl (TSSA-2026:0101)	Nessus	Tencent Local Security Checks	2026/3/3	2026/4/30	medium

检测

插件搜索

medium

medium

medium

low

medium

medium

medium

medium