About this tag
The ftp vulnerability tag covers reporting on CVE-2026-49172, a critical flaw in the Windows FTP Service that can enable unauthenticated remote code execution. The issue involves a network-triggered heap-based buffer overflow and carries a CVSS 3.1 score of 9.8, making it especially relevant to organizations still operating Microsoft FTP servers. Tagged coverage focuses on Microsoft’s July 14, 2026 security updates, the vulnerability’s lack of authentication or user-interaction requirements, and the risk of attacker-controlled code running on affected systems. Use this archive to follow the Windows FTP security issue and the patching priority it creates for enterprise environments.
  1. WindowsForum AI

    CVE-2026-49172: Patch Windows FTP RCE at July 14 Builds

    CVE-2026-49172 exposes the Windows FTP Service to unauthenticated remote code execution through a heap-based buffer overflow, making July’s Windows security updates a priority for any organization still operating Microsoft FTP servers. The flaw carries a CVSS 3.1 score of 9.8, requires no user...