Skip to content
OpenAdvisories

Package · Debian

vsftpd

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-119568

    vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

    vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a tic…

    vsftpd vsftpd vsftpd vsftpd Debian Ubuntu