Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: proftpd 1.3.10rc3, 1.3.9c Clear all filters
TI-2026-45041 CVE-2026-63091 · GHSA-gqm5-f386-9r92

ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser

Priority LOW 32

ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted f…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00525 Published 2026-07-20 Fixed in 1.3.9c, 1.3.10rc3 CWE-126
TI-2026-45040 CVE-2026-63090 · GHSA-wxc2-grp8-f55h

ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly

Priority MEDIUM 41

ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allows authenticated low-privilege attackers to achieve arbitrary code execution by sending crafted SFTP…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00929 Published 2026-07-20 Fixed in 1.3.9c, 1.3.10rc3 CWE-122