CVE-2026-109681
CVE-2026-109681 · Metasploit Framework FTP PASV Response SSRF
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host.
CVSS 4.7 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
metasploit framework
- Versions
- ≥ 0, < 6.5.7: Affected (semver)
Update to 6.5.7