Syncplify Server!
Approved changes feed: RSS · Atom
cpe:2.3:a:syncplify,_inc.:syncplify_server!:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Syncplify, Inc. (bd3b5567-79e7-5c2d-962b-d7416070bf3f) |
|---|---|
| Product | Syncplify Server! (21c0a86f-dda7-5c79-9a8e-db31fc88ef6e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-112344 |
vulnerable | 2026-11-03 10:16:28.859239 |
Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape
MEDIUM (6.8)
Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confinement is enforced only against the requested path and not the on-disk destination of the link. Attackers can leverage a symlink or, on Windows, a directory junction that points outside the jail to read or access restricted files beyond the intended home-folder boundary.
Published: 2026-10-26T15:56:29.273Z
Updated: 2026-11-02T17:59:13.653Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-112343 |
vulnerable | 2026-11-03 10:16:28.403914 |
Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
HIGH (8.1)
Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a protected directory using alternate capitalization or its 8.3 short name to perform file uploads and downloads that the configured override is intended to deny, resulting in unauthorized file access.
Published: 2026-10-26T15:54:12.544Z
Updated: 2026-10-31T01:29:13.634Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.