CVE-2022-27052

7.8 highEPSS 0.3%

High (7.8) in freesshd freeftpd. EPSS 0.3% chance of exploitation in the next 30 days.

FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
CWE: CWE-428
Published: 2022-03-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

freesshd:freeftpd

References

https://github.com/ycdxsb/Vuln/tree/main/FreeFTPd-Unquoted-Service-Path
https://github.com/ycdxsb/Vuln/tree/main/FreeFTPd-Unquoted-Service-Path

Check your stack JSON