CVE-2026-6265: Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
Published Apr 27, 2026
·Updated
Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1
Affected Software
2 affected components
Cerberus Cerberus FTP Server<=2025.4.2
Cerberusftp Ftp Server<2026.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Cerberus FTP Serverto a version that resolves this vulnerability.Fixed in 2026.1
Event History
Apr 27, 2026
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-6265?
CVE-2026-6265 has been classified as a high-severity vulnerability due to its potential for local privilege escalation.
2
How do I fix CVE-2026-6265?
To fix CVE-2026-6265, upgrade your Cerberus FTP Server to version 2026.1 or later.
3
What platforms are affected by CVE-2026-6265?
CVE-2026-6265 affects Cerberus FTP Server running on Windows operating systems.
4
What type of vulnerability is CVE-2026-6265?
CVE-2026-6265 is a local privilege escalation vulnerability.
5
Who is the vendor of the software affected by CVE-2026-6265?
The vendor of the affected software is Cerberus.