Drakkan vulnerabilities

Products

• Sftpgo 13

Newest

• drakkan sftpgo SFTPGo source-side file-pattern filter bypass during copy operations CVE-2026-103028 Fix available 4.3 MediumOctober 13, 2026
• drakkan sftpgo SFTPGo: Denial of service via malformed SSH channel request CVE-2026-77375 Fix available 6.5 MediumOctober 13, 2026
• drakkan sftpgo SFTPGo < 2.7.4 Permission Bypass via Symbolic Link Creation CVE-2026-10031 5.3 MediumJuly 30, 2026
• drakkan sftpgo SFTPGo: Stored XSS via inline parameter on public shares and user file download CVE-2026-49245 Fix available 3.7 LowJuly 2, 2026
• drakkan sftpgo SFTPGo: Path confinement bypass in public browsable share partial ZIP download CVE-2026-49244 Fix available 5.9 MediumJuly 2, 2026
• drakkan sftpgo SFTPGo improperly sanitizes placeholders in group home directories/key prefixes CVE-2026-30915 Fix available 5.3 MediumMarch 13, 2026
• drakkan sftpgo SFTPGo has a Path Traversal and Permission Bypass via Path Normalization Discrepancy CVE-2026-30914 Fix available 5.3 MediumMarch 13, 2026
• drakkan sftpgo Insufficient sanitization of user provided rsync command in SFTPGo CVE-2025-24366 Fix available 7.5 HighFebruary 7, 2025
• drakkan sftpgo Brute force takeover of OpenID Connect session cookies in sftpgo CVE-2024-52801 Fix available 5.3 MediumNovember 29, 2024
• drakkan sftpgo SFTPGo allows administrators to restrict command execution from the EventManager CVE-2024-52309 Fix available 5.1 MediumNovember 21, 2024
• drakkan sftpgo Insufficient access control for password reset in sftpgo CVE-2024-37897 Fix available 5.4 MediumJune 20, 2024
• drakkan sftpgo XSS Vulnerabilities in WebClient CVE-2022-39220 Fix available 6.1 MediumSeptember 20, 2022
• drakkan sftpgo Recovery codes abuse in SFTPGo CVE-2022-36071 Fix available 8.3 HighSeptember 2, 2022