Vulnerability · Published Jan 15, 2026 · Assigned by VulnCheck
CVE-2021-47791SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service
High 7.5
In plain English
A high-severity resource allocation without limits in SmartFTP Client from Smartftp. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 55.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
SmartFTP Client 10.0.2909.0 contains multiple denial of service vulnerabilities that allow attackers to crash the application through specific input manipulation. Attackers can trigger crashes by entering malformed paths, using invalid IP addresses, or clearing connection history in the client's interface.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Smartftp | SmartFTP Client | 10.0.2909.0 (32 and 64 bit) |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- ExploitDB-50266 exploit
- SmartFTP Official Homepage product
- SmartFTP Download Page product
- VulnCheck Advisory: SmartFTP Client 10.0.2909.0 - 'Multiple' Denial of Service third-party-advisory