Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
curl's code for managing SSH connections when SFTP was done using the wolfSSH powered backend was flawed and missed host verification mechanisms. This prevents curl from detecting MITM attackers and more.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-02-20 | 1 | General1 |
| 2026-02-24 | 1 | Patch1 |
🔍 Lambda Watchdog detected that CVE-2025-10966 is no longer present in latest AWS Lambda base image scans. https://github.com/aws/aws-lambda-base-images/issues/424 #AWS #Lambda #Security #CVE #DevOps #SecOps
Post summary
AWS Lambda base images have been updated to remove CVE‑2025‑10966, indicating the vulnerability has been patched.
🚨 New MEDIUM CVE detected in AWS Lambda 🚨 CVE-2025-10966 impacts curl in 14 Lambda base images. Details: https://github.com/aws/aws-lambda-base-images/issues/424 More: https://lambdawatchdog.com/ #AWS #Lambda #CVE #CloudSecurity #Serverless
Post summary
The post alerts that CVE-2025-10966, a MEDIUM-rated vulnerability affecting curl in multiple AWS Lambda base images, has been detected, but it provides no proof of exploitation, patch info, or detailed technical description beyond the component affected.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | haxx | curl | - | - | - |