CVE-2018-18861

CriticalCVSS 9.8

Published: 20/11/2018(UTC)Updated: 19/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.46%

91th percentile - higher than 91% of all known CVEs

Buffer overflow in PCMan FTP Server 2.0.7 allows remote code execution via the APPE command.

An attacker can remotely execute arbitrary code on the server, potentially leading to full system compromise.

Update the FTP server to a newer version or apply other mitigations such as firewalls and access restrictions.

Original NVD description (English source)

Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.