CVE-2026-42167

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 30, 2026

Last Seen

May 1, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerability in ProFTPD Allows Remote Code Execution74.0

A critical SQL injection vulnerability, tracked as CVE-2026-42167, has been identified in ProFTPD, a widely used FTP server. This flaw affects the mod_sql extension and has a CVSS severity score of 8.1. Attackers can exploit this vulnerability to bypass authentication, escalate privileges, and poten...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical SQL Injection Vulnerability in ProFTPD Allows Remote Code Execution

Apr 30·3 sources

Related Entities

Sql Injection Ubuntu Germany CVE-2026-41940 CVE-2026-31431 CWE-89 - SQL Injection CWE-269 - Improper Privilege Management T1190 - Exploit Public-Facing Application ProFTPD

CVE-2026-42167

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical SQL Injection Vulnerability in ProFTPD Allows Remote Code Execution

Related Articles (4)

The mysterious hack of Moldova's healthcare database

ProFTPD: Code injection via mod_sql possible

ProFTPD’s SQL Injection Vulnerability Enables Remote Code Execution Attacks

ProFTPD SQL Injection Flaw Opens Door To Remote Code Execution Attacks

Related Entities