https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-13T10:05:17.601169+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-102727 fkie_cve-2026-102727 2026-11-13T10:05:17.602452+00:00

In Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a, the FTP server accepts the first connection to a passive data port without checking that it comes from the client that requested passive mode. An unauthenticated network attacker who connects to the predictable port first receives the file an authenticated user downloads, or supplies the content of the file the user uploads.

 https://db.gcve.eu/vuln/ghsa-m9v4-gw5f-8cg7 GHSA-m9v4-gw5f-8cg7 2026-11-13T10:05:17.602520+00:00

FTP Passive Data Connection Not Bound to the Authenticated Control Peer