CVE-2026-49172

48th percentile - higher than 48% of all known CVEs

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

The risk is that an unauthenticated attacker can execute code remotely, potentially leading to compromise of the FTP server and the underlying Windows system.

Apply the appropriate security patch from Microsoft for the Windows FTP Service.