CVE-2026-35025 | ProFTPD up to 1.3.9b/1.3.10rc2 RNFR Command dir_canonical_path link following

June 24, 2026 Yanac

A vulnerability, which was classified as critical, has been found in ProFTPD up to 1.3.9b/1.3.10rc2. Affected by this vulnerability is the function dir_canonical_path of the component RNFR Command Handler. The manipulation leads to link following.

This vulnerability is documented as CVE-2026-35025. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More