PProFTPD

Products

Exploited and recent CVEs

• CVE-2026-63091 Medium 6.5 ProFTPD mod_sftp Signed Integer Overflow via SCP Size-Record Parser 0.5%
• CVE-2026-63090 High 8.8 ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly 0.9%
• CVE-2026-44331 High 8.1 In ProFTPD through 1.3.9a before 7666224, a SQL injection vulnerability in sqltab_fetch_clients_cb() in contrib/mod_wrap2_sql.c allows a remote attacker to inject arbitrary SQL commands via a crafted 0.5%
• CVE-2026-42167 High 8.1 mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backen 7.4%
• CVE-2021-47865 High 7.5 ProFTPD 1.3.7a - Remote Denial of Service 0.6%