Xlightftpd vulnerabilities
We track 3 vulnerabilities in Xlightftpd products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 15, 2025.
Latest Xlightftpd vulnerabilities
- 7.5 High severity
Xlight FTP Server: Out-of-bounds Write
Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution confi
- 9.8 Critical severity
xlight_ftp_server: Integer Overflow or Wraparound
Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content.
- 7.5 High severity
Xlight FTP Server: Improper Resource Shutdown or Release
A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The