CVE-2026-77375— SFTPGo: Denial of service via malformed SSH channel request
Quick assessment
Affected
drakkan sftpgo
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SFTPGo 是一款开源的、基于事件驱动的文件传输解决方案。在 2.7.5 版本之前，经过认证的 SSH 用户可以在打开通道时发送格式错误的协议消息，导致未处理的错误，进而终止服务器进程，并影响所有已连接用户，直至服务器重新启动。目前已确认该漏洞不会对数据的机密性或完整性造成影响。该问题已在 2.7.5 版本中修复。
Possible ATT&CK Techniques 2 AI
T1499.002 · Service Exhaustion Flood T1499.004 · Application or System Exploitation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-77375
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SFTPGo: Denial of service via malformed SSH channel request
Source: CVE Program / CVE List V5
Vulnerability Description
SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对数组索引的验证不恰当
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-77375
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-77375
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-77375 (1)
Vendor Advisories for CVE-2026-77375 (1)
Vendor Pages for CVE-2026-77375 (1)
IV. Related Vulnerabilities
Same product: sftpgo
-
CVE-2026-103028
SFTPGo source-side file-pattern filter bypass during copy op -
CVE-2026-49244
SFTPGo: Path confinement bypass in public browsable share pa -
CVE-2026-49245
SFTPGo: Stored XSS via inline parameter on public shares and -
CVE-2026-10031
SFTPGo 2.7.4 Permission Bypass via Symbolic Link Creation -
CVE-2026-30915
SFTPGo improperly sanitizes placeholders in group home direc
Same vendor: drakkan
-
CVE-2026-103028
SFTPGo source-side file-pattern filter bypass during copy op -
CVE-2026-49244
SFTPGo: Path confinement bypass in public browsable share pa -
CVE-2026-49245
SFTPGo: Stored XSS via inline parameter on public shares and -
CVE-2026-10031
SFTPGo 2.7.4 Permission Bypass via Symbolic Link Creation -
CVE-2026-30915
SFTPGo improperly sanitizes placeholders in group home direc
Same weakness: CWE-129
-
CVE-2026-109251
FreeRDP before 3.32.0 Out-of-Bounds Write via MS-RDPEGT Vide -
CVE-2026-109250
FreeRDP 3.0.0 before 3.32.0 Heap Buffer Overflow via PKCS#11 -
CVE-2026-103220
Affinity 3.3.1前版本图像解析越界读漏洞 -
CVE-2026-107737
SumatraPDF CHM `its://` signed index causes an out-of-bounds -
CVE-2026-107325
Application denial of service via missing BSON array length
V. Comments for CVE-2026-77375
No comments yet