Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Syncplify, Inc. Clear all filters
TI-2026-81010 CVE-2026-116844 · GHSA-j2x3-vcc8-r98q

Cleartext FTP data transfers in ftpserverlib expose file contents

Priority LOW 27

Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0009 Published 2026-10-27 No fix listed CWE-319
TI-2026-80470 CVE-2026-112344 · GHSA-p96g-3942-wh9r

Path traversal in Syncplify Server lets users escape the home folder jail

Priority LOW 35

Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confi…

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00299 Published 2026-10-26 Fixed in 8.8.0 CWE-59
TI-2026-80469 CVE-2026-112343 · GHSA-8xjp-7jq6-2fc2

Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing

Priority MEDIUM 40

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3…

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00472 Published 2026-10-26 Fixed in 8.8.0 CWE-41
TI-2020-19365 CVE-2020-37230 · GHSA-w62m-j7rv-p5ff

Syncplify.me Server! 5.0.37 Unquoted Service Path Privilege Escalation

Priority HIGH 72

Syncplify.me Server! 5.0.37 contains an unquoted service path vulnerability in the SMWebRestServicev5 service that allows local attackers to escalate privileges by exploiting the unquoted binary path.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00114 Published 2026-05-16 No fix listed CWE-428