CVE-2026-119364

A flaw was found in ProFTPD. An authenticated remote attacker can bypass write restrictions and overwrite files in protected locations due to a symbolic link symlink following flaw in the modcopy module. By creating a symlink in a writable directory pointing to a restricted target, an attacker ca...