Skip to content

CVE record · 1 source

CVE-2026-119147

CVSS 4.3

ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that skips Limit WRITE checks for…

Vendor: ProFTPD Project
Product: ProFTPD
CVSS v3.1: 4.3 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Weakness: CWE-863
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CVE NVD 45h ago

ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that skips Limit WRITE checks for…

ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass in the mod_sftp copy-file extension handler that skips Limit WRITE checks for new destination files. Authenticated SFTP users can copy any readable file to a…

CVSS 4.3 CVE-2026-119147 ProFTPD Project