SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-49172

CRITICAL · CVSS 9.8 EPSS 0.67%

Source: NVD + CISA KEV + EPSS · Published 2026-07-14 · Last synced 2026-08-13

CyberRota Analysis

AI-Generated

A critical heap-based buffer overflow vulnerability in the Windows FTP Service enables unauthorized attackers to execute arbitrary code remotely. This flaw poses a significant risk to systems running affected versions of Windows, making it imperative for organizations that utilize FTP services to prioritize immediate patching and mitigation efforts.

CVE
CVE-2026-49172
Severity
CRITICAL
CVSS
9.8
EPSS
0.67%
Windows

Original NVD Description

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)

CVE-2026-87654 CRITICAL CVE-2026-87653 MEDIUM CVE-2026-87648 HIGH CVE-2026-87644 HIGH CVE-2026-87621 CRITICAL CVE-2026-87618 HIGH