CVE-2026-82819 | BDVDB-2026-393821 Detail

Description#

A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-10-21Record published in the CVE List.
2. Version 22026-10-30Most recent update recorded in the CVE List.