{"vulnerability": "CVE-2026-63090", "sightings": [{"uuid": "a88bbe5d-45fc-4331-8ed5-df730b029808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2rowxc2u", "content": "\ud83d\udfe0 CVE-2026-63090 - High (8.8)\n\nProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63090/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T16:00:32.455933Z"}, {"uuid": "a80e04c5-4009-483e-b5ec-fe1e82f5d8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vujr4dm2a", "content": "CVE-2026-63090 - ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly\nCVE ID : CVE-2026-63090\n \n Published : July 20, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability i...", "creation_timestamp": "2026-07-20T18:20:12.348341Z"}, {"uuid": "7dd1aafa-dbb7-430e-9d4a-84bcb3926399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4wm5kcto2j", "content": "CVE-2026-63090\nAuthenticated attackers can exploit this flaw to execute malicious code on ProFTPD servers. This is particularly concerning because the attack only requires low-privilege access. To mitigate this risk, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T04:06:04.802272Z"}, {"uuid": "cb088570-1806-4d17-95b0-54d29ef3d87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mr55nrpmia2o", "content": "ProFTPD Turns One Weak Login Into a Full-Scale Server Autopsy\nPANIC 72% | Lag 0.0h | CVE-2026-63090 lets authenticated attackers execute code on ProFTPD servers through the mod_sftp mod\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-21T06:12:15.950077Z"}]}