{"apiVersion":"1","notice":"Security Threat Pulse API v1. Free, no key. Facts with sources; verdicts follow the published rules at https://securitythreatpulse.com/methodology. Not advice. Some source data is withheld here until its terms allow re-serving.","generatedAt":"2026-11-11T08:30:31.064Z","products":["proftpd"],"actNowTotal":1,"results":[{"query":"proftpd","matched":1,"actNow":1,"events":[{"id":"kev-2026-10-08-proftpd-proftpd","url":"https://securitythreatpulse.com/events/kev-2026-10-08-proftpd-proftpd","title":"ProFTPD: attackers can gain admin rights","verdict":"act_now","verdictReason":"Attacks are confirmed. Ready-made attack tools are public. The severity score is critical (10.0). The exploit prediction score is 99%.","tier":"now","rankScore":6,"rankWhy":["Exploitation is confirmed by an authoritative source.","The product faces the internet or gives remote access.","Ready-made attack tools are public."],"rulesVersion":"v3","ladder":{"talk":"reported","damage":"none","attempts":"confirmed","exposure":"none","exploited":"confirmed"},"untrackedRungs":["exposure","damage"],"cves":["CVE-2015-3306"],"vendor":"ProFTPD","product":"ProFTPD","affectedProducts":[{"kind":"direct","slug":"proftpd/proftpd","vendor":"ProFTPD","product":"ProFTPD","evidence":["kev"],"vendorKey":"proftpd","productKey":"proftpd"}],"category":{"id":"file-transfer","label":"File transfer","why":"It holds files you swap with customers and partners, a common target for bulk data theft.","doThis":"Patch it today and check it for files or accounts you do not recognize."},"summary":"ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","cvss":10,"epss":0.99497,"exploitMaturity":"weaponized","kevListed":true,"kevDateAdded":"2026-10-08","kevDueDate":"2026-10-11","firstSeenAt":"2026-10-08T00:00:00.000Z","updatedAt":"2026-11-08T16:37:40.566Z","newestEvidenceAt":"2026-11-09T19:59:41.489Z"}]}]}