CVE-2026-10031 | drakkan SFTPGo up to 2.7.3 Symbolic Link access control

July 31, 2026 Yanac

A vulnerability classified as critical was found in drakkan SFTPGo up to 2.7.3. Impacted is an unknown function of the component Symbolic Link Handler. The manipulation results in improper access controls.

This vulnerability is reported as CVE-2026-10031. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More