Threats tagged 'ghsa-93qj-4wg6-29x9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2026-119568vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated Critical9.12026-10-30GCVE DatabaseCVE-2026-119568 vsftpd versions through 3.0.5 have an authentication bypass vulnerability in the ssl_data_accept() function. This flaw allows unauthenticated attackers who share the victim's source IP to hijack FTPS data connections by resuming their own TLS session ticket. Attackers can obtain a ticket via AUTH TLS and then connect to the victim's PASV port to steal downloads or inject upload data. Report on CVE-2026-119568 Vulnerability CWE-940 #ghsa-93qj-4wg6-29x9	GCVE Database	2026-10-30

Page 1 of 1