EIP-2026-115457

This exploit demonstrates a format string vulnerability in Ipswitch WS_FTP Home/Professional clients. The PoC sets up a fake FTP server that sends a maliciously crafted response containing format specifiers, allowing arbitrary code execution or denial-of-service when the client processes the response.