CyberRota
Back to database

CVE-2026-8328

UNKNOWN · CVSS N/A EPSS 0.05% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-13 · Last synced: 2026-06-09

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-8328
Severity
UNKNOWN
CVSS
N/A
EPSS
0.05%

Original NVD Description

The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed. While makepasv() was patched to replace server-supplied PASV host addresses with the actual peer address (getpeername()[0]), ftpcp() still calls parse227() directly and passes the raw attacker-controllable IP address and port to target.sendport(). This patch is related to CVE-2021-4189.