Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://labs.reversec.com/advisories/2026/04/cerberus-ftp-server-elevation-of-privileges Exploit, Vendor Advisory
- https://labs.reversec.com/advisories/2026/04/cerberus-ftp-server-elevation-of-privileges Exploit, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.3 · cerberusftpNVD modified 2026-10-26 21:10
Affected (CPE criteria) 1
cpe:2.3:a:cerberusftp:ftp_server:*:*:*:*:*:*:*:*
References 3
- https://labs.reversec.com/advisories/2026/04/cerberus-ftp-server-elevation-of-privileges Exploit, Vendor Advisory
- https://www.cerberusftp.com/releasenotes/ Release Notes
- https://labs.reversec.com/advisories/2026/04/cerberus-ftp-server-elevation-of-privileges Exploit, Vendor Advisory