Xlight FTP Server vulnerabilities

3 known vulnerabilities in Xlight FTP Server from Xlightftpd. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Xlight FTP Server: Out-of-bounds Write

  CVE-2023-53886Dec 15, 2025Xlightftpd

  Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution confi

• 9.8 Critical severity

  xlight_ftp_server: Integer Overflow or Wraparound

  CVE-2024-46483Oct 22, 2024XlightftpdEPSS 1.11%

  Xlight FTP Server <3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content.

• 7.5 High severity

  Xlight FTP Server: Improper Resource Shutdown or Release

  CVE-2024-0737Jan 19, 2024XlightftpdEPSS 4.2%

  A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The