CVE-2015-3306

Vendor

ProFTPD

Product

ProFTPD

EPSS

0.99 (p100)

CISA KEV

added 8 Oct 2026, due 11 Oct 2026 (21d overdue)

Weakness

CWE-284

Exposure class

File transfer, Edge / VPN / firewall, Web platform

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 78
   KEV CISA KEV 24d ago

   ProFTPD Improper Access Control Vulnerability

   ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

   KEV · due 11 Oct 2026 (overdue) EPSS 0.99 Fix available CVE-2015-3306 ProFTPD
2. 28
   CISA advisory CISA 23d ago

   Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

   Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber…

   CVE-2014-6278CVE-2015-3306CVE-2015-5477+5 more Microsoft Google