EIP-2026-115092

This exploit demonstrates a directory traversal vulnerability in Core FTP Server by sending a malformed CWD command with repeated '/...' sequences to escape the root directory. It then uses PASV mode to list files, confirming the traversal success.