Known Vulnerabilities for FTP Shell Server by Ftpshell
Listed below are 10 of the newest known vulnerabilities associated with "FTP Shell Server" by "Ftpshell".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65608 json | Grav versions >= 1.7.0 and before 2.0.9 contain a remote code execution vulnerability. FlexDirectory::dynamicDataField() reso... | Not Provided | 2026-07-23 | 2026-07-23 |
| CVE-2026-63767 json | ktransformers through 0.6.3, fixed in commit def0f93, contains an unauthenticated pickle deserialization vulnerability that a... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-63766 json | GPT-SoVITS through 20250606v2pro contains an OS command injection vulnerability in webui.py where ASR, slice, denoise, and uv... | Not Provided | 2026-07-20 | 2026-07-21 |
| CVE-2026-63305 json | AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callb... | Not Provided | 2026-07-16 | 2026-07-20 |
| CVE-2026-61498 json | Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoin... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-61457 json | The Grav API plugin (getgrav/grav-plugin-api) before 1.0.3 contains a file upload extension bypass in the API media controlle... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-58482 json | Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called `ApprovalInbox`... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-58480 json | Blocksy Companion Pro plugin for WordPress before 2.1.47 contains an unauthenticated arbitrary file upload vulnerability that... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-58195 json | Agentic-Flow is an AI agent orchestration platform. Prior to 2.0.14, agentic-flow MCP server tools in src/mcp/standalone-stdi... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-58169 json | Vibe-Trading before 0.1.10 contains a DNS rebinding authentication bypass vulnerability that allows remote attackers to bypas... | Not Provided | 2026-06-30 | 2026-07-14 |