CVE-2026-63090

ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the modsftp module that allows authenticated low-privilege attackers to achieve arbitrary code execution by sending crafted SFTP packet fragments exceeding the 16 KB reassembly buffer in the fxp.c component...

CVE-2026-63090

creationtimestamp| type| source ---|---|--- 2026-07-20 16:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2rowxc2u 2026-07-20 18:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vujr4dm2a 2026-07-21 04:06:04+00:00| seen|...

DEBIAN-CVE-2026-63090

ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the modsftp module that allows authenticated low-privilege attackers to achieve arbitrary code execution by sending crafted SFTP packet fragments exceeding the 16 KB reassembly buffer in the fxp.c component...