https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 31 Oct 2026 21:25:45 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-119568 <p>vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim&#39;s source IP can obtain a ticket via AUTH TLS, then connect to the victim&#39;s PASV port to steal downloads or inject upload data.</p> <p>vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim&#39;s source IP can obtain a ticket via AUTH TLS, then connect to the victim&#39;s PASV port to steal downloads or inject upload data.</p> https://db.gcve.eu/vuln/fkie_cve-2026-119568 https://db.gcve.eu/vuln/ghsa-93qj-4wg6-29x9 <p>vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim&#39;s source IP can obtain a ticket via AUTH TLS, then connect to the victim&#39;s PASV port to steal downloads or inject upload data.</p> <p>vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim&#39;s source IP can obtain a ticket via AUTH TLS, then connect to the victim&#39;s PASV port to steal downloads or inject upload data.</p> https://db.gcve.eu/vuln/ghsa-93qj-4wg6-29x9 https://db.gcve.eu/vuln/msrc_cve-2026-119568 msrc_CVE-2026-119568 https://db.gcve.eu/vuln/msrc_cve-2026-119568