Cerberus Ftp Server
Monthly
Local privilege escalation in Cerberus FTP Server on Windows (all builds through 2025.4.2) lets a low-privileged local user leverage insecurely preserved inherited filesystem permissions to gain higher privileges on the host. The SSVC framework records a proof-of-concept exploit (published by Reversec Labs) with total technical impact, though EPSS estimates real-world exploitation probability at just 0.01%. The issue is fixed in release 2026.1.
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Local privilege escalation in Cerberus FTP Server on Windows (all builds through 2025.4.2) lets a low-privileged local user leverage insecurely preserved inherited filesystem permissions to gain higher privileges on the host. The SSVC framework records a proof-of-concept exploit (published by Reversec Labs) with total technical impact, though EPSS estimates real-world exploitation probability at just 0.01%. The issue is fixed in release 2026.1.
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.