CVE-2026-112343Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing

Açıklama

Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Attackers can address a protected directory using alternate capitalization or its 8.3 short name to perform file uploads and downloads that the configured override is intended to deny, resulting in unauthorized file access.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Kaynaklar ve yamalar

• Release Notes release-notespatch
• VulnCheck Advisory: Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing third-party-advisory