CVE-2020-8796: Biscom Secure File Transfer

Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Biscom Secure File Transfer (SFT) before 5.1.1071 and 6.0.1xxx before 6.0.1005 allows Remote Code Execution on the server.

Affected products

• Biscom Secure File Transfer: before 5.1.1071 (fixed in 5.1.1071); from 6.0.1000, before 6.0.1005 (fixed in 6.0.1005)

Published 2020-02-07. Last modified 2026-06-17.