CVE-2026-6265

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-278

Affected software

No affected versions have been published.

Timeline

Published: Apr 27, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-626508.8A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). Server-side authorization checks in the web-based management in CVE-2026-626525.3A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The device firmware contains binaries from which debugging symb CVE-2026-626536.8A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). The input received over a proprietary communication protocol th CVE-2026-626546.8A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). A special maintenance mode can be activated via a physical key CVE-2026-626555.7A security flaw was found in certain NETGEAR Orbi models that could allow an unauthorized user to cause the device to stop responding or res CVE-2026-626565.4A security flaw was found in certain NETGEAR RAX models that could allow a logged-in user to send specially crafted requests to the router a CVE-2026-626574.9A security flaw in the router's certificate validation process was discovered in the NETGEAR XR1000 Gaming Router and certain Nighthawk mode CVE-2026-626584.7A security flaw was discovered in certain NETGEAR Nighthawk RAX series routers that could allow someone already logged in to the device to r CVE-2026-626594.3A security flaw was discovered in the NETGEAR WAX333 Access Point that could allow someone already logged in and connected to the local netw CVE-2026-62668.3A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (CVE-2026-626637.5Banks generates meaningful LLM prompts using a simple template language. In versions prior to 2.4.4, all four media filters (image, audio, v CVE-2026-626645.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates