CVE-2026-109681 — Metasploit Framework FTP PASV Response SSRF
The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive …
Published: 2026-10-20 · CVSS: 4.7 · CVSS 3.1
The FTP client trusts the server's PASV response IP:port without validation against the control connection target. A rogue FTP server can specify any IP:port in the 227 Passive Mode response, causing the operator's machine to open a TCP connection to an arbitrary host.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7