Skip to content

CVE-2025-14242

CVE

Threat entity extracted from intelligence sources

Frequency
5
occurrences
First Seen
January 23, 2026
Last Seen
November 10, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

On November 10, 2026, SUSE released updates for vsftpd to address CVE-2025-14242, an integer overflow vulnerability that can lead to denial of service via improper parsing of the `ls` command parameter. The vulnerability affects multiple SUSE Linux distributions, including openSUSE Leap 15.6 and SUS...

Fedora has released updates to address the critical vulnerability CVE-2025-14242 in vsftpd, a secure FTP daemon. The updates were made available for both Fedora 42 and Fedora 43, with the patch being implemented on January 14, 2026, by Tomas Korbar.

Public Exploits

Checking GitHub for proof-of-concept code…