CVE-2026-112344 is a path traversal vulnerability in Syncplify Server! versions 6.0.0 through 8.7.0. An attacker can use a symbolic link or directory junction to access files outside the virtual filesystem root. This issue is fixed in version 8.8.0. The vulnerability allows attackers to bypass intended access controls, potentially leading to unauthorized data access or modifications. System administrators [truncated]
CVE-2026-112343 is a high-severity vulnerability in Syncplify Server! versions before 8.8.0, allowing authenticated SFTP users to bypass per-path permission overrides using case-insensitive filesystem path resolution and 8.3 short names. This vulnerability enables attackers to access protected directories using alternate capitalization or 8.3 short names, potentially leading to unauthorized file access an [truncated]
