Is CVE-2026-119146 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-119146?

CVE-2026-119146 has a CVSS v3 severity of MEDIUM (5.6).

Back

CVE-2026-119146

Description

ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnerability in the mod_rewrite int:utf8trans RewriteMap that allows remote attackers to overwrite static buffers. Attackers can send FTP command arguments longer than 1024 bytes, without authentication if pre-login commands are rewritten, to corrupt session memory and crash the session.