PlatformPlansPartners
Resources
ToolsBlogDocs
Labs
CVE ForecastOpservantAll Research →
Sign Up →
critical·Network Vulnerabilities·Updated Apr 30, 2026

ProFTPD mod_sql - Preauth User Backdoor

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
3k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2026-42167
8.1
CVSShigh
Exploitable remotely over the internet · no authentication required.

mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
ProFTPDby ProFTPD
AFFECTED< 1.3.9a→SAFE ✓≥ 1.3.9a
Updated Sep 9, 2026View on NVD →
Similar Tools
critical
wpDiscuz <= 5.3.5 - SQL Injection
→critical
Progress ADC LoadMaster - Command Injection
→critical
Dahua ICC Intelligent IOT Comprehensive Management Platform Remote Code Execution Scanner
→high
Joomla com_jobprofile SQL Injection Scanner
→critical
CVE-2022-40619 Scanner
→critical
Flowise < 3.1.2 - node-custom-function Unauthorized RCE
→medium
Giga Messenger WordPress - Cross-Site Scripting
→critical
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
→

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

ProFTPD mod_sql - Preauth User Backdoor CVE-2026-42167 Scanner | S4E