CVE-2026-6265CWE-278

Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2

High · published April 27, 2026

CVSS v4.0
7.3
EPSS
0%
Percentile
17.6
In the wild
Unconfirmed
What it is

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1

The record
Technical detail
CVSS v4.0
7.3 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00260 · 17.6th percentile
Weakness
CWE-278 · Insecure Preserved Inherited Permissions
Published
2026-04-27T13:00Z
EPSS history
Timeline
  • 27 APR 13:00Z
    Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
    cvelistv5