CVE-2022-50689: Cobiansoft Reflector

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration.

Affected products

• Cobiansoft Reflector: version 0.9.93 only

Published 2025-12-22. Last modified 2026-06-17.