Read the docs

vsftpd

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

vsftpd records in CISA KEV

No vsftpd vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-83032 CVE-2026-119568 · GHSA-93qj-4wg6-29x9

Authentication bypass in vsftpd lets attackers hijack FTPS data channels

Priority MEDIUM 41

vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00404 Published 2026-10-30 No fix listed CWE-940
TI-2026-83031 CVE-2026-119567 · GHSA-9f6m-7pvr-9832

Access control bypass in vsftpd lets FTP users run denied commands

Priority LOW 11

vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute denied commands by issuing RFC 775 X-prefixed aliases.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-10-30 Fix deferred CWE-184
Open these records in search →