CVE-2026-77375
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Oct 13, 2026
Vendor
unknown
Description
SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality or integrity impact has been identified. This issue is fixed in 2.7.5.