CVE Watch26 oct 2026

CVE-2026-6265

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been res

CVSS

8.8

Alto

EPSS

0.3%

p18

KEV

—

Exploit Today

0-100

Publicado: 27 abr 2026 · Última mod.: 26 oct 2026 · CWE-278

EPSS · 30d

0.3%EPSS · 30 días0.4%

2026-09-282026-10-25

Descripción técnica

Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-714776.7 MED

2.7%

——1mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.1, release tar archives record mise/bin/mise with user and group ID 1001 and packaging/standalone/install.envsubst extracts and moves it without normalizing ownership, allowing a local user with those IDs to replace a root-installed executable, especially when MISE_INSTALL_PATH targets a shared location such as /usr/local/bin. This issue is fixed in version 2026.7.1.4d