CVE-2026-119146 — Vulnerability intelligence
—
Published:
- CVSS
- 6.3
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap that allows remote attackers to overwrite static buffers. Attackers can send FTP command arguments longer than 1024 bytes, without authentication if pre-login commands are rewritten, to corrupt session memory and crash the session.