syncplify_server vulnerabilities
CVEs whose affected-version data names the syncplify_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112344Medium· 6.8Syncplify Server! < 8.8.0 Symbolic Link Jail Escape
Syncplify Server! before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outside the virtual filesystem root because confinement is enforced only…
▾ SunlitSyncplify, Inc. · Syncplify Server!via CVEORG
CVE-2026-112343High· 8.1Syncplify Server! < 8.8.0 Permission Override Bypass via Path Casing
Syncplify Server! before 8.8.0 contains an access control bypass vulnerability that allows authenticated SFTP users to evade per-path permission overrides by exploiting case-insensitive filesystem path resolution and 8.3 short names. Att…
▾ TwilightSyncplify, Inc. · Syncplify Server!via CVEORG