CVE WatchOct 26, 2026

CVE-2026-6265

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been res

CVSS

8.8

High

EPSS

0.3%

p18

KEV

—

Exploit Today

0-100

Published: Apr 27, 2026 · Last modified: Oct 26, 2026 · CWE-278

EPSS · 30d

0.3%EPSS · 30 days0.4%

2026-09-282026-10-25

Technical description

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-714776.7 MED

2.7%

——1mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/install.envsubst extracts and moves it without normalizing ownership, allowing a local user with those IDs to replace a root-installed executable, especially when MISE_INSTALL_PATH targets a shared location such as /usr/local/bin. This issue is fixed in version 2026.7.1.4d