CVE-2026-102727

FTP Passive Data Connection Not Bound to the Authenticated Control Peer

Published Sep 29, 2026
CVSS 6.0 medium
0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

Eclipse Foundation NetX Duo

CVE-2026-102727 at the National Vulnerability Database