CVE-2026-119568
Received Received - Intake

Authentication Bypass in vsftpd via TLS Session Hijacking

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: VulnCheck

Description
vsftpd through 3.0.5 contains an authentication bypass vulnerability in ssl_data_accept() that allows unauthenticated attackers to hijack FTPS data connections by resuming their own TLS session ticket. Attackers sharing the victim's source IP can obtain a ticket via AUTH TLS, then connect to the victim's PASV port to steal downloads or inject upload data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-119568
EUVD
EUVD-2026-113833

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
vsftpd vsftpd 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-940 The product establishes a communication channel to handle an incoming request that has been initiated by an actor, but it does not properly verify that the request is coming from the expected origin.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

vsftpd through 3.0.5 has an authentication bypass flaw in the ssl_data_accept() function. Unauthenticated attackers can hijack FTPS data connections by resuming their own TLS session ticket. If attackers share the victim's source IP, they can obtain a ticket via AUTH TLS, then connect to the victim's PASV port to steal downloads or inject upload data.

Impact Analysis

This vulnerability allows attackers to intercept or alter file transfers over FTPS. Attackers could steal sensitive data during downloads or inject malicious files during uploads. The impact depends on the data being transferred and the attacker's capabilities.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection principles or HIPAA's security requirements. Organizations using vulnerable vsftpd versions may face compliance violations, legal penalties, and reputational damage if data breaches occur.

Mitigation Strategies

Upgrade vsftpd to a version later than 3.0.5 to address the authentication bypass in ssl_data_accept(). Disable TLS session resumption if possible or restrict session ticket sharing among users.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-119568. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart