PT-2026-35415 · Unknown · Cerberus Ftp Server

Sharan Patil · Published 2026-04-27 · Updated 2026-05-07 · CVE-2026-6265

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cerberus FTP Server versions prior to 2026.1

Description Insecure preserved inherited permissions in Cerberus FTP Server on Windows allow for privilege escalation.

Recommendations Update to version 2026.1.

Exploit

Fix

LPE

Weakness Enumeration

CWE-278

Related Identifiers

CVE-2026-6265

Affected Products

Cerberus Ftp Server

References · 6

• 🔥 https://labs.reversec.com/advisories/2026/04/cerberus-ftp-server-elevation-of-privileges · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-6265 · Security Note
• https://twitter.com/VulmonFeeds/status/2048870840515612851 · Twitter Post
• https://twitter.com/CVEnew/status/2048852173765722490 · Twitter Post
• https://cerberusftp.com/releasenotes · Note
• https://t.me/cveNotify/162473 · Telegram Post