CVE-2022-50934

Published Jan 13, 2026

Last updated 6 months ago

FTP

Overview

Description
Rejected reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.
Source
disclosure@vulncheck.com
NVD status
Rejected

Social media

Hype score
Not currently trending

Related CVEs

  1. Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.•CVE-2026-49172
  2. ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)•CVE-2026-60002
  3. Incorrect authorization in the XML-RPC API of WebPros Plesk before 18.0.78.4 allows a low-privileged authenticated customer to look up domains they do not own, because ownership is enforced only for certain lookup filters and schema validation is bypassed for legacy protocol versions. This results in cross-tenant disclosure of other tenants' FTP credentials stored in cleartext, which can be leveraged to execute code as another tenant's system user.•CVE-2026-56843
  4. sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server.•CVE-2026-59995
  5. scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations.•CVE-2026-59996

References

Sources include official advisories and independent security research.