https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-19T13:07:11.039897+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-77375 fkie_cve-2026-77375 2026-10-19T13:07:11.085764+00:00

SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.

 https://vulnerability.circl.lu/vuln/ghsa-q7pc-356p-hggc GHSA-q7pc-356p-hggc — SFTPGo: Denial of service via malformed SSH channel request 2026-10-19T13:07:11.085894+00:00

Affected: Go: github.com/drakkan/sftpgo/v2

### Summary

A flaw in the SSH service allows an authenticated client to crash the server by sending a malformed protocol message while opening a channel.

### Impact

Any user able to authenticate over SSH can trigger an unhandled error condition that aborts the server process. This results in a denial of service affecting all connected users until the service is restarted. No confidentiality or integrity impact has been identified; the issue is limited to availability.