HIGHVulnerability
Verified
Global
CISA KEV: ProFTPD ProFTPD — ProFTPD Improper Access Control Vulnerability
·Source: CISA KEV
Updated:
Executive Summary
ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
Analysis
ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. Added to CISA Known Exploited Vulnerabilities catalog on 2026-10-08. Remediation due: 2026-10-11.