Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

CVE-2026-119567

🗓️ 03 Nov 2026 00:00:00Reported by ubuntu.comType 
ubuntucve
 ubuntucve🔗 ubuntu.com👁 2 Views

vsftpd through 3.0.5 contains an access control bypass vulnerability thatallows authenticated FTP users to execute denied commands by issuing RFC775 X-prefixed aliases. The cmds_denied check in process_post_login()compares literal tokens, so attac...

Related
Packages
Refs
ReporterTitlePublishedViews
Family
circl
Circl		CVE-2026-119567
30 Oct 202604:16
–circl
cnnvd
CNNVD		vsftpd input validation error vulnerability
30 Oct 202600:00
–cnnvd
cve
CVE		CVE-2026-119567
30 Oct 202611:31
–cve
cvelist
Cvelist		CVE-2026-119567 vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases
30 Oct 202611:31
–cvelist
debiancve
Debian CVE		CVE-2026-119567
2 Nov 202600:39
–debiancve
euvd
EUVD		EUVD-2026-113832
30 Oct 202611:31
–euvd
nvd
NVD		CVE-2026-119567
30 Oct 202612:16
–nvd
osv_azl
osv_azl		AZL-111796 CVE-2026-119567 affecting package vsftpd 3.0.5-1
30 Oct 202612:16
–osv_azl
osv_debian
osv_debian		DEBIAN-CVE-2026-119567
30 Oct 202612:16
–osv_debian
osv_ubuntu
osv_ubuntu		UBUNTU-CVE-2026-119567
3 Nov 202600:00
–osv_ubuntu
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
Ubuntu14.04allvsftpd0vsftpd_0_all.deb
Ubuntu16.04allvsftpd0vsftpd_0_all.deb
Ubuntu18.04allvsftpd0vsftpd_0_all.deb
Ubuntu20.04allvsftpd0vsftpd_0_all.deb
Ubuntu22.04allvsftpd0vsftpd_0_all.deb
Ubuntu24.04allvsftpd0vsftpd_0_all.deb
Ubuntu26.04allvsftpd0vsftpd_0_all.deb
Ubuntu26.10allvsftpd0vsftpd_0_all.deb

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a demo
03 Nov 2026 23:23Current
6.2Medium risk
Vulners AI Score6.2
CVSS 42.3
CVSS 3.13.1
EPSS0.00217
2