Login Request a demo
PR
Product
proftpd
by proftpd · last CVE Jul 20, 2026
On CISA KEVExploited in the wild
34
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities34In the news4Timeline
Severity mix
Critical 3High 14Medium 5Low 0
Severity
All severities34Critical3High14Medium5Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add proftpd to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-63091
6.5
1%
Jul 20
ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser
Affected: before 1.3.9c; 1.3.10rc1 before 1.3.10rc3
CVE-2026-53994
6.5
0%
Jul 18
ProFTPD mod_sftp Heap Buffer Overflow via Unsigned Integer Underflow and Size Truncation
Affected: before 1.3.10
CVE-2023-48795
5.9
94%
Dec 18
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some…
Affected: through 1.3.8b
CVE-2017-7418
5.5
0%
Apr 4
ProFTPD before 1.3.5e and 1.3.6 before 1.3.6rc5 controls whether the home directory of a user could contain a symbolic link through the AllowChrootSymlinks configuration option,…
Affected: through 1.3.5; 1.3.6; 1.3.6; 1.3.6; 1.3.6; 1.3.6
CVE-2019-19269
4.9
2%
Nov 30
An issue was discovered in tls_verify_crl in ProFTPD through 1.3.6b
Affected: through 1.3.5e; 1.3.6; 1.3.6; 1.3.6; 1.3.6; 1.3.6; +2 more
Showing 5