CVE-2020-26130

7.8 highEPSS 0.4%

High (7.8) in open tftp server project open tftp server. EPSS 0.4% chance of exploitation in the next 30 days.

Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 38% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2020-10-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

open_tftp_server_project:open_tftp_server

References

https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26130.md
https://github.com/an0ry/advisories
https://sourceforge.net/projects/tftp-server/
https://github.com/OffensiveOceloot/advisories/blob/main/CVE-2020-26130.md
https://github.com/an0ry/advisories

Check your stack JSON