CVE-2026-6265

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1

Scoring

Severity

HIGH

CVSS base score

7.3

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

EPSS probability

0.26%

CWE

CWE-278

Published

2026-04-27

Last modified

2026-04-27

Affected products

• Cerberus Cerberus FTP Server
• Cerberus Cerberus FTP Server

Weakness type

• CWE-278

Related vulnerabilities

• CVE-2026-71477 — mise: Incorrect file ownership, when installed by the root user using `install.sh`
• CVE-2025-2947 — IBM i privilege escalation
• CVE-2024-38531 — Nix sandbox escape
• CVE-2023-38497 — Cargo not respecting umask when extracting crate archives

Markdown version · Browse all CVEs