CVE-2023-53886 MEDIUM

CVE-2023-53886: Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program

Vendor Xlightftpd
Product Xlight FTP Server
Weakness CWE-121
Published December 15, 2025
Last update May 12, 2026
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.

Key dates

02Disclosure timeline

December 15, 2025 CVE published
May 12, 2026 Record updated