ZeroPathAI/proftpd-CVE-2026-42167-poc

ZeroPathAI/proftpd-CVE-2026-42167-poc

GitHubGitHub
GitHubgithub.com
Releases0
Stars22
POCs to demonstrate CVE-2026-42167 in ProFTPD
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-42167↗
8.1 HIGH—

mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).