CVE-2017-11749: Internet-Soft FTP Commander

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

InternetSoft FTP Commander 8.02 and prior has an untrusted search path, allowing DLL hijacking via a Trojan horse dwmapi.dll file.

Affected products

• Internet-Soft FTP Commander: up to and including 8.02

Published 2017-07-30. Last modified 2026-06-17.