CVE-2009-4644: Accellion Secure File Transfer Appliance

High severity, CVSS 9.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypass the restricted shell and execute arbitrary commands via shell metacharacters to the ping command, as demonstrated by modifying the cli program.

Affected products

• Accellion Secure File Transfer Appliance: version 7_0_135 only; version 7_0_178 only; version 7_0_189 only; version 7_0_259 only; version 7_0_296 only

Published 2010-02-19. Last modified 2026-06-16.