CVE-2026-67192 | Xlight FTP Server up to 3.9.4 GCM Decrypt GCM decrypt function stack-based overflow

July 29, 2026 Yanac

A vulnerability marked as very critical has been reported in Xlight FTP Server up to 3.9.4. This affects the function GCM decrypt function of the component GCM Decrypt. This manipulation causes stack-based buffer overflow.

The identification of this vulnerability is CVE-2026-67192. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More