CVE-2021-41638: Melag FTP Server

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

The authentication checks of the MELAG FTP Server in version 2.2.0.4 are incomplete, which allows a remote attacker to access local files only by using a valid username.

Affected products

• Melag FTP Server: version 2.2.0.4 only

Published 2022-06-24. Last modified 2026-06-17.