Xlight vulnerabilities
We track 2 vulnerabilities in Xlight products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Xlight vulnerabilities
- 8.1 High severity
Xlight FTP Server: Stack-based Buffer Overflow
Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by sending malformed SSH packets when a GCM cipher is negotiated. Attackers can craft packets with an
- 9.8 Critical severity
Xlight FTP Server: Heap-based Buffer Overflow
Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the end of a heap buffer by sending a malformed SSH client identification string. A logic error in the re