EUVD-2026-98781

SFTPGo source-side file-pattern filter bypass during copy operations...

CVE-2026-103028

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...

CVE-2026-103028 SFTPGo source-side file-pattern filter bypass during copy operations

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...