3 matches found
CVE-2026-67607
LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fresh connection that reuses the FTP context against an in-progress ABRT cleanup. Attackers can exploit the unprotected re-check of WorkerThreadId between workerthreadcleanup and...
9.2CVSS5.6AI score0.00333EPSS
SaveExploits1References3
PT-2026-66781
LightFTP 2.3.1 contains a race condition vulnerability that allows remote attackers to crash the server by racing a fresh connection that reuses the FTP context against an in-progress ABRT cleanup. Attackers can exploit the unprotected re-check of WorkerThreadId between worker thread cleanup and...
9.2CVSS5.6AI score0.00333EPSS
SaveExploits1References3
20