HIGH 7.1 NVD
CVE-2026-82819
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicio
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0.
References
- https://labs.reversec.com/advisories/2026/09/universal-naming-convention-unc-path-injectio
- https://www.cerberusftp.com/releasenotes/
This high severity vulnerability with a CVSS score of 7.1 was published on 2026-10-21 via NVD.
vulnfeed aggregates 17594 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.