H1-3650473 — Vulnetix

H1-3650473 PUBLISHED

FTP entrypath accepts 0xFF (Telnet IAC) through incomplete ISCNTRL filter, sent on wire via CWD on connection reuse

Timeline

Apr 7, 2026 CVE Published
Apr 7, 2026 PoC Published

References

FTP entrypath accepts 0xFF (Telnet IAC) through incomplete ISCNTRL filter, sent on wire via CWD on connection reuse advisory

Open in Interactive Console →

$ Console Community · 100/wk Open console ›