Sploitus

CVE-2025-15224

No indexed exploits for CVE-2025-15224 yet

When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.

Affected products
Debian, Linuxmint, Red Os, Ubuntu, Curl, Libssh
Haxx Curl
< 8.18.0
CVSS 3.1
3.1 LOW
EPSS
0.4% (34th percentile)
Weakness
CWE-287
NVD status
Analyzed
Published
2026-01-08
CVE-2025-15224 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2025-15224 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2025-15224 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.