Xlight FTP Server vulnerabilities

2 known vulnerabilities in Xlight FTP Server from Xlight. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Xlight FTP Server: Stack-based Buffer Overflow

  CVE-2026-67192Jul 29, 2026XlightEPSS 1.03%

  Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by sending malformed SSH packets when a GCM cipher is negotiated. Attackers can craft packets with an

• 9.8 Critical severity

  Xlight FTP Server: Heap-based Buffer Overflow

  CVE-2026-67191Jul 29, 2026Xlight

  Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the end of a heap buffer by sending a malformed SSH client identification string. A logic error in the re