CVE-2026-112344

Syncplify Server! before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confinement is enforced only against the requested path and not the on-disk destination ...

CVE-2026-112343

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a protected directory using alternate...

CVE-2026-112344 Syncplify Server! < 8.8.0 Symbolic Link Jail Escape

Syncplify Server! before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confinement is enforced only against the requested path and not the on-disk destination ...

CVE-2026-112344

Syncplify Server! versions before 8.8.0 are vulnerable to a path traversal vulnerability. The issue stems from improper link resolution where confinement is enforced only against the requested path rather than the on-disk destination. By placing a symbolic link (on Linux/Unix) or a directory junc...

EUVD-2026-109967

Syncplify Server! before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confinement is enforced only against the requested path and not the on-disk destination ...

EUVD-2026-109966

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a protected directory using alternate...

CVE-2026-112343 Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a protected directory using alternate...

CVE-2026-112343

Syncplify Server! versions prior to 8.8.0 are vulnerable to an access control bypass that allows authenticated SFTP users to evade per-path permission overrides. The root cause is the exploitation of case-insensitive filesystem path resolution and 8.3 short names , enabling attackers to access pr...

Syncplify Server code-related vulnerabilities

Syncplify Server is an FTP server provided by the Syncplify company. Version 5.0.37 of Syncplify Server has a code vulnerability. This vulnerability stems from an unreferenced service path within the SMWebRestServicev5 service. This could allow local attackers to exploit the unreferenced binary...