CyberSecBulletin

ProFTPD Project vulnerabilities

We track 1 vulnerability in ProFTPD Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 24, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest ProFTPD Project vulnerabilities

  • 8.1 High severity

    ProFTPD: Improper Link Resolution Before File Access

    CVE-2026-35025ProFTPD Project

    ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unr