CVE-2026-129123

C-Kermit 8.0.200 before 11.1.515 contains a buffer overflow vulnerability in getreply in ckcftp.c that allows malicious FTP servers to overwrite client memory by sending overlong security replies. Attackers controlling or intercepting an FTP server can send long PBSZ replies after AUTH TLS, or lo...