What’s Vulnerable › Products

Xlight FTP Server vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Xlight FTP Server version is affected

Latest Xlight FTP Server vulnerabilities

• CVE-2026-67193 — Xlight FTP Server < 3.9.5 Information Disclosure via USER Command (CVSS 5.3)
• CVE-2026-67192 — Xlight FTP Server < 3.9.5 Pre-Auth Stack Buffer Overflow via SSH GCM Cipher (CVSS 8.1)
• CVE-2026-67191 — Xlight FTP Server < 3.9.5 Pre-Auth Heap Buffer Overflow via SSH Parser (CVSS 9.8)