CVE-2022-22899: Coreftp Core FTP

Medium severity, CVSS 5.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Core FTP / SFTP Server v2 Build 725 was discovered to allow unauthenticated attackers to cause a Denial of Service (DoS) via a crafted packet through the SSH service.

Affected products

• Coreftp Core FTP: version 2.0 only

Published 2022-02-17. Last modified 2026-07-09.