Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 12, 2026
SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service
CVE-2020-37209
Description
SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.
Affected products
2- Nsasoft/Nsauditor SpotFTP FTP Password Recoveryv5Range: 3.0.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/47868mitreexploit
- www.vulncheck.com/advisories/spotftp-ftp-password-recovery-name-denial-of-servicemitrethird-party-advisory
- www.nsauditor.commitreproduct
News mentions
0No linked articles in our index yet.