CVE-2019-25306
HIGHBlackMoon FTP Server 3.1.2.1731 - Privilege Escalation
Title source: llmDescription
BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to insert malicious code that would execute with LocalSystem account permissions during service startup.
Exploits (1)
Scores
CVSS v3
7.8
EPSS
0.0001
EPSS Percentile
0.3%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-428
Status
draft
Timeline
Published
Feb 11, 2026
Tracked Since
Feb 18, 2026