UNKNOWNCVSS not yet scoredVulnerability
CVE-2026-87865
When libcurl uses libssh2 with a hashed `known_hosts` file, an unrelated initial entry can cause host key validation to report a key *mismatch* as a *missing* key to the `CURLOPT_SSH_KEYFUNCTION` callback.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-22T22:14:18.200859+00:00
- Epss score
- 0.00275
- Cve id
- CVE-2026-87865
- First seen by Signal
- 2026-10-21T22:34:35+00:00
- Retrieved at
- 2026-10-22T22:17:35+00:00
- Published at
- 2026-10-20T21:17:20.693
- Last modified
- 2026-10-22T16:57:53.407
- Epss percentile
- 0.18913
Explore deeper with Ninja Signal's threat intelligence graph