CVE-2026-129120

C-Kermit versions 11.0.506 before 11.1.515 are vulnerable to a RECEIVE CONFIRM bypass in the ckcfns.c component. The root cause is an error in the recursive GET root computation , which allows malicious Kermit servers to write unrequested files—such as .ssh/authorized_keys or shell startup files—...