Skip to contentDrakkan Sftpgo vulnerabilities
- drakkan sftpgoSFTPGo source-side file-pattern filter bypass during copy operationsCVE-2026-103028Fix available4.3 Medium
- drakkan sftpgoSFTPGo: Denial of service via malformed SSH channel requestCVE-2026-77375Fix available6.5 Medium
- drakkan sftpgoSFTPGo < 2.7.4 Permission Bypass via Symbolic Link CreationCVE-2026-100315.3 Medium
- drakkan sftpgoSFTPGo: Stored XSS via inline parameter on public shares and user file downloadCVE-2026-49245Fix available3.7 Low
- drakkan sftpgoSFTPGo: Path confinement bypass in public browsable share partial ZIP downloadCVE-2026-49244Fix available5.9 Medium
- drakkan sftpgoSFTPGo improperly sanitizes placeholders in group home directories/key prefixesCVE-2026-30915Fix available5.3 Medium
- drakkan sftpgoSFTPGo has a Path Traversal and Permission Bypass via Path Normalization DiscrepancyCVE-2026-30914Fix available5.3 Medium
- drakkan sftpgoInsufficient sanitization of user provided rsync command in SFTPGoCVE-2025-24366Fix available7.5 High
- drakkan sftpgoBrute force takeover of OpenID Connect session cookies in sftpgoCVE-2024-52801Fix available5.3 Medium
- drakkan sftpgoSFTPGo allows administrators to restrict command execution from the EventManagerCVE-2024-52309Fix available5.1 Medium
- drakkan sftpgoInsufficient access control for password reset in sftpgoCVE-2024-37897Fix available5.4 Medium
- drakkan sftpgoXSS Vulnerabilities in WebClientCVE-2022-39220Fix available6.1 Medium
- drakkan sftpgoRecovery codes abuse in SFTPGoCVE-2022-36071Fix available8.3 High