HIGH

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

The Hacker News • Aug 25, 2026

MEDIUM

USN-8572-1: Wget vulnerability

Ubuntu Security • Jul 20, 2026

MEDIUM

CVE-2026-47729 Squid: Memory disclosure in FTP gateway

Microsoft Security Response Center • Jul 18, 2026

CRITICAL

CVE-2026-49172 Windows FTP Service Remote Code Execution Vulnerability

Microsoft Security Response Center • Jul 14, 2026

MEDIUM

VU#564823: GNU Wget enables SSRF via unvalidated FTP PASV IPs

CERT/CC • Jul 10, 2026

MEDIUM

CVE-2026-8328 FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address

Microsoft Security Response Center • May 17, 2026

MEDIUM

CVE-2026-34956 Openvswitch: open vswitch: denial of service via malformed ftp epasv command

Microsoft Security Response Center • May 15, 2026

CRITICAL

Detecting Exploitation of CrushFTP Vulnerability (CVE-2025-31161) With PacketSmith Yara Detection Module - Using track_state and flow_state

Reddit r/netsec • May 14, 2026

MEDIUM

Half of the 6 Million Internet-Facing FTP Servers Lack Encryption

SecurityWeek • Apr 20, 2026

MEDIUM

[UPDATE] [mittel] Red Hat Enterprise Linux (vsftpd): Schwachstelle ermöglicht Denial of Service

BSI Germany • Mar 06, 2026

HIGH

A fake FileZilla site hosts a malicious download

Malwarebytes Labs • Mar 02, 2026