QwikSec

Security Database

CVE

CWE

Training

CVE-2023-53886

Published: Dec 15, 2025

Modified: May 12, 2026

PUBLISHED

Description

Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service condition.

Vendor	Product	Versions
Xlightftpd	Xlight FTP Server	affected `3.9.3.6`

Weaknesses (CWE)

References

ExploitDB-51665

exploit

XLight FTP Server

product

VulnCheck Advisory: Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.