Vsftpd vulnerabilities
We track 1 vulnerability in Vsftpd products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Vsftpd vulnerabilities
- 7.4 High severity
vsftpd: Improper Verification of Source of a Communication Channel
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a tick