EIP-2026-100968

This exploit demonstrates a jail breakout in NcFTPd <= 2.8.5 by leveraging the 'site symlink' command to create a symbolic link to /etc/passwd, allowing unauthorized file access. The PoC shows a valid user account is required to execute the attack.