Read the docs

Syncplify, Inc.

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Syncplify, Inc. records in CISA KEV

No Syncplify, Inc. vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2020-19365 CVE-2020-37230 · GHSA-w62m-j7rv-p5ff

Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation

Priority HIGH 72

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00114 Published 2026-05-16 No fix listed CWE-428
TI-2026-80469 CVE-2026-112343 · GHSA-8xjp-7jq6-2fc2

Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing

Priority MEDIUM 40

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00472 Published 2026-10-26 Fixed in 8.8.0 CWE-41
TI-2026-80470 CVE-2026-112344 · GHSA-p96g-3942-wh9r

Path traversal in Syncplify Server lets users escape the home folder jail

Priority LOW 35

Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confi…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00299 Published 2026-10-26 Fixed in 8.8.0 CWE-59
TI-2026-81010 CVE-2026-116844 · GHSA-j2x3-vcc8-r98q

Cleartext FTP data transfers in ftpserverlib expose file contents

Priority LOW 27

Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0009 Published 2026-10-27 No fix listed CWE-319
Open these records in search →