CVE-2020-36964: IK80 Yatinywinftp

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

YATinyWinFTP contains a denial of service vulnerability that allows attackers to crash the FTP service by sending a 272-byte buffer with a trailing space. Attackers can exploit the service by connecting and sending a malformed command that triggers a buffer overflow and service crash.

Affected products

• IK80 Yatinywinftp: version 0.0.5 only

Published 2026-01-28. Last modified 2026-06-17.