CVE-2026-103028

3 advisories.

Go/github.com/drakkan/sftpgo CVE-2026-103028: medium 4.3

SFTPGo source-side file-pattern filter bypass during copy operations in github.com/drakkan/sftpgo

Action: No fix published. Pin and monitor.

introduced	fixed	last affected
0	-	-

No fixed version in the source.

CVE-2026-103028 · published 2026-10-19T21:08:35Z · modified 2026-10-19T21:31:38.309842766Z · JSON

SFTPGo source-side file-pattern filter bypass during copy operations

Action: Upgrade github.com/drakkan/sftpgo/v2 to 2.7.6 or later.

go get github.com/drakkan/sftpgo/v2@v2.7.6

introduced	fixed	last affected
2.5.0	2.7.6	-

2.7.6

CVE-2026-103028 · published 2026-10-15T20:22:10Z · modified 2026-10-19T21:41:22.513452094Z · JSON

SFTPGo source-side file-pattern filter bypass during copy operations in github.com/drakkan/sftpgo

Action: Upgrade github.com/drakkan/sftpgo/v2 to 2.7.6 or later.

go get github.com/drakkan/sftpgo/v2@v2.7.6

introduced	fixed	last affected
2.5.0	2.7.6	-

2.7.6

CVE-2026-103028 · published 2026-10-19T21:08:35Z · modified 2026-10-19T21:31:38.309842766Z · JSON