EUVD-2026-125558

C-Kermit 8.0.200 before 11.1.515 contains a path traversal vulnerability in doftpget in ckcftp.c that allows malicious FTP servers to write files outside the intended directory. Attackers can return absolute paths, tilde names, or dot-dot components in NLST or MLSD listings during MGET /RECURSIVE...

EUVD-2026-125556

C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply in ckcftp.c that allows malicious FTP servers to overwrite client memory by sending overlong security replies. Attackers controlling or intercepting an FTP server can send long PBSZ replies after AUTH TLS, or lo...

CVE-2026-129123

The C-Kermit software (versions 8.0.200 before 11.1.515 ) is vulnerable to a buffer overflow in the getreply() function within ckcftp.c. A malicious or intercepted FTP server can overwrite client memory by sending overlong security replies. Specifically, the overflow occurs in the static reply_bu...