Skip to content
OpenAdvisories

Vendor

Xlight

3 known vulnerabilities.

Products

Xlight FTP Server 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-67191

    Xlight FTP Server < 3.9.5 Pre-Auth Heap Buffer Overflow via SSH Parser

    Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote unauthenticated attackers to write past the end of a heap buffer by sending a malformed SSH client identification string. A logic error in the r…

    Xlight Xlight FTP Server