CVE-2026-82819

The record

A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0.

Affected packages

Related vulnerabilities

• CVE-2026-25039 Parsec is a cloud-based application for simple and cryptographically secure file sharing. CWE-40
• GHSA-h3x4-hc5v-v2gm OpenClaw: Windows media loaders accepted remote-host file URLs before local path… CWE-40