winscp security advisories

1 threat alert tracking vulnerabilities and security advisories that affect winscp products.

Vulnios monitors winscp CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent winscp security news in one place, or click into an individual alert for full detail.

Critical Vulnerability: CVE-2021-3331 — winscp — winscp
WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default in
criticalCVE-2021-3331

Track winscp exposure across your environment

Vulnios automatically cross-references your asset inventory against new winscp CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.

Start a free scan

winscp security advisories

Critical Vulnerability: CVE-2021-3331 — winscp — winscp

Track winscp exposure across your environment