azure linux vsftpd vulnerabilities

Latest azure linux vsftpd CVEs

Newest publication first

1. CVE-2026-119568 vsftpd through 3.0.5 require_ssl_reuse Bypass via FTPS Data Channel Hijacking

   Published 2026-10-30

   Critical·CVSS 9.1 EPSS 0.40%

   vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.