CVE-2026-6265

HIGH

Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2026-6265 has a selected CVSS score of 7.3 (high).

Description

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 27, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Cerberus FTP Server

Browse Cerberus / Cerberus FTP Server

Default status: unaffected

CVE ListThrough 2025.4.2affected
2026.1unaffected

References

3