Ddrakkan

Products

Exploited and recent CVEs

• CVE-2026-103028 Medium 4.3 SFTPGo source-side file-pattern filter bypass during copy operations 0.2%
• CVE-2026-77375 Medium 6.5 SFTPGo: Denial of service via malformed SSH channel request 0.3%
• CVE-2026-49244 Medium 5.9 SFTPGo: Path confinement bypass in public browsable share partial ZIP download 0.4%
• CVE-2026-49245 Low 3.7 SFTPGo: Stored XSS via inline parameter on public shares and user file download 0.3%
• CVE-2026-10031 Medium 5.4 SFTPGo < 2.7.4 Permission Bypass via Symbolic Link Creation 0.2%
• CVE-2026-30915 Medium 5.3 SFTPGo improperly sanitizes placeholders in group home directories/key prefixes 0.3%
• CVE-2026-30914 Medium 5.3 SFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy 0.6%
• CVE-2025-24366 High 7.5 Insufficient sanitization of user provided rsync command in SFTPGo 0.7%
• CVE-2024-52801 Medium 5.3 Brute force takeover of OpenID Connect session cookies in sftpgo 0.4%
• CVE-2024-52309 Medium 5.1 SFTPGo allows administrators to restrict command execution from the EventManager 0.6%
• CVE-2024-37897 Medium 5.4 Insufficient access control for password reset in sftpgo 0.3%
• CVE-2022-39220 Medium 6.1 XSS Vulnerabilities in WebClient 0.6%
• CVE-2022-36071 High 8.3 Recovery codes abuse in SFTPGo 0.5%