Approved changes feed: RSS · Atom

cpe:2.3:a:cerberus:cerberus_ftp_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCerberus (3bdd9bcc-3028-5a92-aea2-2bdf04834498)
ProductCerberus Ftp Server (40eea747-b8ee-5e70-8496-f669783effe3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-82819 vulnerable 2026-11-03 10:15:52.415276 Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0.
Published: 2026-10-21T04:30:40.808Z
Updated: 2026-10-30T16:33:26.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-6265 vulnerable 2026-06-08 08:07:04.602086 Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1
Published: 2026-04-27T13:00:10.309Z
Updated: 2026-04-27T13:58:14.228Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.