The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files. This affects TSCPFileSystem::SCPSink in core/ScpFileSystem.cpp.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle Solaris | — | Upgrade consolidation/osnet/osnet-incorporation to version 11.4-11.4.7.0.1.5.0 on Solaris 11.4Upgrade network/ssh to version 7.7.0.1-11.4.7.0.1.3.0 on Solaris 11.4 | Mar 20, 2019 | Jan 10, 2019 |
| Winscp | — | Upgrade WinSCP to the latest version | Sep 11, 2025 | Jan 10, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub