CVE-2026-82819
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can coerce authentication against the underlying server, resulting in leakage of the Cerberus service account's Net-NTLMv2 hash.
Risk Assessment
Leakage of the service account's Net-NTLMv2 hash may allow an attacker to crack it or use it in relay attacks, leading to account takeover and further escalation.
Recommendation
Upgrade Cerberus FTP Server to version 2026.3.0 or later and consider restricting the service account's privileges.
Other vulnerabilities in Cerberus FTP Server
See all- CVE-2017-6367High
In Cerberus FTP Server version 8.0.10.1, a crafted HTTP request causes the Windows service to crash. The attack involves a long Host header and an invalid Content-Length header.
- CVE-2017-6880Critical
Buffer overflow in Cerberus FTP Server 8.0.10.3 allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a long MLST command.
- CVE-2026-6265High
An insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation. This issue has been resolved in Cerberus FTP Server: 2026.1.
Original NVD description (English source)
A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS