EIP-2026-115248

PRE-CVE

FileZilla 3.11.0.2 SFTP Module - Denial of Service

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-115248. PoCs published by 3unnym00n.

AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in FileZilla 3.11.0.2's SFTP module by sending a malformed DH group exchange reply during the SSH handshake, causing the client to crash. It sets up a fake SSH server to trigger the vulnerability when the client connects.

Description

FileZilla 3.11.0.2 SFTP Module - Denial of Service

Exploits (1)

exploitdb WORKING POC VERIFIED
by 3unnym00n · pythondoswindows
https://www.exploit-db.com/exploits/37286

This exploit targets a denial-of-service vulnerability in FileZilla 3.11.0.2's SFTP module by sending a malformed DH group exchange reply during the SSH handshake, causing the client to crash. It sets up a fake SSH server to trigger the vulnerability when the client connects.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Moderate
Reliability
Reliable
Target: FileZilla 3.11.0.2
No auth needed
Prerequisites: Network access to the target · Target must initiate an SFTP connection to the attacker's server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026