CVE-2026-129120

C-Kermit versions 11.0.506 before 11.1.515 are vulnerable to a RECEIVE CONFIRM bypass in the ckcfns.c component. The root cause is an error in the recursive GET root computation , which allows malicious Kermit servers to write unrequested files—such as .ssh/authorized_keys or shell startup files—...

EUVD-2026-125559

C-Kermit 11.0.506 before 11.1.515 contains a RECEIVE CONFIRM bypass vulnerability that allows malicious Kermit servers to write unrequested files without prompting by abusing recursive GET root computation in ckcfns.c. Attackers can send files such as .ssh/authorizedkeys or shell startup files...

EUVD-2026-125553

C-Kermit before 11.1.515 contains a heap buffer overflow vulnerability in putsrv in ckcfns.c that allows malicious peers to write past the srvcmd buffer by sending crafted packets. Attackers can use Kermit repeat-count compression in server command, GET, or file-header packets to write...

CVE-2026-129126

C-Kermit versions prior to 11.1.515 are susceptible to a heap buffer overflow in the putsrv() function within ckcfns.c. The vulnerability occurs during packet decoding when malicious peers send crafted packets utilizing kermit repeat-count compression in server command, GET, or file-header packet...