Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: vsftpd Clear all filters
TI-2026-83032 CVE-2026-119568 · GHSA-93qj-4wg6-29x9

Authentication bypass in vsftpd lets attackers hijack FTPS data channels

Priority MEDIUM 41

vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket.

CVSS 4.0CRITICAL 9.1 Network No auth No interaction EPSS 0.00404 Published 2026-10-30 No fix listed CWE-940
TI-2026-83031 CVE-2026-119567 · GHSA-9f6m-7pvr-9832

Access control bypass in vsftpd lets FTP users run denied commands

Priority LOW 11

vsftpd through 3.0.5 contains an access control bypass vulnerability that allows authenticated FTP users to execute denied commands by issuing RFC 775 X-prefixed aliases.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-10-30 Fix deferred CWE-184