Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: ProFTPD 1.3.10rc5, 1.3.9e Clear all filters
TI-2026-82979 CVE-2026-119147 · GHSA-24hg-mwfp-6pwj

Authorization bypass in ProFTPD mod_sftp copy-file handling

Priority LOW 24

ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that skips Limit WRITE checks for new destination files.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00289 Published 2026-10-30 Fixed in 1.3.9e, 1.3.10rc5 CWE-863
TI-2026-82978 CVE-2026-119146 · GHSA-wj68-6748-262r

Buffer overflow in ProFTPD mod_rewrite utf8trans RewriteMap

Priority LOW 28

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap that allows remote attackers to overwrite static buffers.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00459 Published 2026-10-30 Fixed in 1.3.9e, 1.3.10rc5 CWE-120