CVE

CVE-2024-48651

7.5

CVSShigh

Exploitable remotely over the internet · no authentication required.

Description

In ProFTPD through 1.3.8b before cec01cc, supplemental group inheritance grants unintended access to GID 0 because of the lack of supplemental groups from mod_sql.

Attack Vector

Network

Privileges Req.

None

User Interaction

None

proftpd

Updated Oct 12, 2026View on NVD →

S4E scanner

highProduct Based Network Vulnerabilities~10 seconds

CVE-2024-48651 Scanner

CVE-2024-48651 Scanner - Privilege Escalation vulnerability in ProFTPD

Used 2.6k times · 3.4k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: proftpd

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →