CVE-2026-9547— SSH improper host validation
Possible ATT&CK Techniques 1AI
T1557 · Adversary-in-the-MiddleGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-9547
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SSH improper host validation
Source: NVD (National Vulnerability Database)
Vulnerability Description
When a libcurl-based application performs transfers via `SCP://` or `SFTP://` and utilizes the `CURLOPT_SSH_KEYFUNCTION` callback, it may silently accept an untrusted server. This vulnerability occurs when a server presents a host key type that does not match the specific key type already recorded for that host in the `known_hosts` file. Instead of rejecting the mismatch, the callback mechanism fails to properly enforce the restriction, allowing the connection to succeed without warning and risking a potential man-in-the-middle attack.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-9547
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9547
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-9547 (2)
Proof of Concept for CVE-2026-9547 (1)
Same Patch Batch · curl · 2026-07-03 · 18 CVEs total
| CVE-2026-10536 | HTTP/2 stream-dependency tree UAF | |
| CVE-2026-8932 | incomplete mTLS config matching in conn reuse | |
| CVE-2026-8458 | wrong reuse for different services | |
| CVE-2026-8925 | SASL double-free | |
| CVE-2026-8286 | wrong STARTTLS connection reuse | |
| CVE-2026-8927 | env-set cross-proxy Digest auth state leak | |
| CVE-2026-8926 | password leak with netrc and user in URL | |
| CVE-2026-8924 | trailing dot domain super cookie | |
| CVE-2026-12064 | proto-default skips SSH verification | |
| CVE-2026-11352 | QUIC zero-length UDP datagrams busy-loop | |
| CVE-2026-9546 | sending old referer | |
| CVE-2026-9545 | exposing HTTP/3 early data | |
| CVE-2026-9080 | UAF after pause in socket callback | |
| CVE-2026-9079 | stale proxy password leak | |
| CVE-2026-11564 | Native CA trust persist | |
| CVE-2026-11856 | cross-origin Digest auth state leak | |
| CVE-2026-11586 | WS Auto-PONG memory exhaustion |
IV. Related Vulnerabilities
V. Comments for CVE-2026-9547
No comments yet