Report: CVE-2019-25681 - Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow (2026)

Report: CVE-2019-25681 - Xlight FTP Server 3.9.1 SEH Overwrite Buffer Overflow (2026)

CVE ID :CVE-2019-25681 Published : April 5, 2026, 8:45 p.m. | 20 minutes ago Description :Xlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attackers to crash the application and overwrite SEH pointers by supplying a crafted buffer string. Attackers can inject a 428-byte payload through the program execution field in virtual server configuration to trigger a buffer overflow that corrupts the SEH chain and enables potential code execution. Severity: 8.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
April 5, 2026
Attack Vector: local
Impact: code execution