CVE-2009-4646: Accellion Secure File Transfer Appliance

High severity, CVSS 9.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Static code injection vulnerability in the administrative web interface in Accellion Secure File Transfer Appliance allows remote authenticated administrators to inject arbitrary shell commands by appending them to a request to update the SNMP public community string.

Affected products

• Accellion Secure File Transfer Appliance: any version

Published 2010-02-19. Last modified 2026-06-16.