Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage

vsftpd vulnerabilities

3 published CVEs name vsftpd among the affected products.

Published CVEs
3
Last 12 months
2
Critical
2
Known exploited
0

Critical 2High 0Medium 0Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20191
  2. 20262

Newest CVEs

  • CVE-2026-119568

    vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

    vsftpd · vsftpd

    Critical9.1
  • CVE-2026-119567

    vsftpd through 3.0.5 cmds_denied Bypass via RFC 775 Command Aliases

    vsftpd · vsftpd

    Low2.3
  • CVE-2011-2523

    vsftpd 2.3.4 downloaded between 20110630 and 20110703 contains a backdoor which opens a shell on port 6200/tcp.

    vsftpd · vsftpd

    Critical9.8

Products with the most CVEs

  1. vsftpd3

Most common weaknesses

  1. CWE-184 1
  2. CWE-78 OS command injection1
  3. CWE-940 1