What is GHSA-jxgv-cgf3-xqr5?

GHSA-jxgv-cgf3-xqr5 is a security advisory published by GitHub Security Advisories with High severity. A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC...

Which CVE IDs does GHSA-jxgv-cgf3-xqr5 cover?

GHSA-jxgv-cgf3-xqr5 covers the following CVE IDs: CVE-2026-82819. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-jxgv-cgf3-xqr5High

A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC...

Vendor

GitHub Security Advisories

Published

October 21, 2026

Last Modified

October 21, 2026

🔗 CVE IDs covered (1)

CVE-2026-82819 →

📋 Description

A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter. By supplying a malicious SMB share path, an attacker can execute authentication coercion against the underlying server, resulting in the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-82819
https://labs.reversec.com/advisories/2026/09/universal-naming-convention-unc-path-injection-in-cerberus-ftp-server
https://www.cerberusftp.com/releasenotes
https://github.com/advisories/GHSA-jxgv-cgf3-xqr5