HIGHVulnerability
Verified
Global

CISA KEV: ProFTPD ProFTPD — ProFTPD Improper Access Control Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Analysis

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-08. Remediation due: 2026-10-11.

Indicators of Compromise (1)

CVE (1)
CVE-2015-3306
Source Attribution

Originally published by CISA KEV on Oct 8, 2026. Verified by: CISA.

Related Threats