Cerberus CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Cerberus CVE published 2026-10-21

CVE-2026-82819

A vulnerability in Cerberus FTP Server allows an authenticated remote attacker to perform UNC path injection via a manipulated parameter, potentially leading to the leakage of the Cerberus service account's Net-NTLMv2 hash. This issue has been resolved in Cerberus FTP Server: 2026.3.0. Defenders should assess exposure and prioritize verification and remediation, especially for versions prior to 2026.3.0. [truncated]