How many CVEs does Cerberus have?

Cerberus has 15 published CVE records since 2005, including 1 in the last two years.

How many Cerberus CVEs are in CISA KEV?

None of Cerberus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Cerberus products have the most CVEs?

The Cerberus products with the most published CVEs are cerberus helpdesk, Cerberus FTP Server, ftp server, Cerberus FTP Enterprise, helpdesk.

What are the most common weakness types in Cerberus CVEs?

Cerberus's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-278 (Insecure Preserved Inherited Permissions), CWE-287 (Improper Authentication), CWE-400 (Uncontrolled Resource Consumption).

Are there public exploits for Cerberus vulnerabilities?

Yes — 9 of Cerberus's CVEs have a known public exploit.

How many critical Cerberus vulnerabilities are there?

Cerberus has 1 critical and 4 high-severity CVEs.

What is the average severity of Cerberus CVEs?

The average CVSS base score across Cerberus's scored CVEs is 5.7.

RadicalNotion.AI

Log in Create an account

15 CVEs

Cerberus Vulnerabilities

Name: Cerberus vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Cerberus.

15

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

9

Public exploits

PoC or exploit code

5.7

Avg CVSS

2005–2026

Overview

Cerberus has 15 published CVE records since 2005, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 9 have a known public exploit. The average CVSS base score across scored CVEs is 5.7.

Security scorecard

A quick read on Cerberus's vulnerability posture, as a share of its 15 published CVEs.

Average CVSS: 5.7
Critical / high: 33%
Actively exploited (KEV): 0%
Public exploit available: 60%
Patch available: 13%

Severity and exploitation

How the CVSS severity of Cerberus's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High4

Medium9

Low1

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Cerberus's CVEs are currently listed in CISA's KEV catalog.

Public exploits

9

9 of Cerberus's CVEs have a known public exploit available.

Most affected products

The Cerberus products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Cerberus CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Cerberus CVE records.

Disclosure activity by year

How many Cerberus CVEs were published each year.

2005

5

2006

4

2007

2

2009

1

2017

1

2024

1

2026

1

Latest Cerberus CVEs

The most recently disclosed vulnerabilities affecting Cerberus.

Local Privilege Escalation in Cerberus FTP Server =< 2025.4.2
CWE-278
High · CVSS 7.3
EPSS 0.4%2026-04-27
High vulnerability · 2024-05-17
CWE-400
High · CVSS 7.5
EPSS 0.4%2024-05-17
Critical vulnerability · 2017-03-17
CWE-119
Critical · CVSS 9.8
EPSS 14.3%2017-03-17
Medium vulnerability · 2009-03-06
CWE-287
Medium · CVSS 5.0
EPSS 1.2%2009-03-06
Medium vulnerability · 2007-11-10
CWE-79
Medium · CVSS 4.3
EPSS 1.2%2007-11-10
Low vulnerability · 2007-10-24
Low · CVSS 2.1
EPSS 0.3%2007-10-24
Medium vulnerability · 2006-12-07
Medium · CVSS 6.8
EPSS 1.8%2006-12-07
Medium vulnerability · 2006-10-20
Medium · CVSS 5.0
EPSS 2.8%2006-10-20
High vulnerability · 2006-09-05
High · CVSS 7.5
EPSS 1.8%2006-09-05
Medium vulnerability · 2006-02-01
Medium · CVSS 4.3
EPSS 2.0%2006-02-01
High vulnerability · 2005-12-20
High · CVSS 7.5
EPSS 3.2%2005-12-20
Medium vulnerability · 2005-12-20
Medium · CVSS 4.3
EPSS 1.3%2005-12-20

Get an alert for each new Cerberus CVE, with AI-written analysis and remediation steps.

Monitor Cerberus CVEs

Other vendors

CVE counts for other vendors.

microsoft42,015 CVEs linux25,264 CVEs Google17,495 CVEs Apple15,508 CVEs Oracle13,348 CVEs Debian10,234 CVEs IBM9,452 CVEs Red Hat8,588 CVEs

Browse all vendors

Frequently asked questions

Common questions about Cerberus vulnerabilities.

How many CVEs does Cerberus have?: Cerberus has 15 published CVE records since 2005, including 1 in the last two years.
How many Cerberus CVEs are in CISA KEV?: None of Cerberus's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Cerberus products have the most CVEs?: The Cerberus products with the most published CVEs are cerberus helpdesk, Cerberus FTP Server, ftp server, Cerberus FTP Enterprise, helpdesk.
What are the most common weakness types in Cerberus CVEs?: Cerberus's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-278 (Insecure Preserved Inherited Permissions), CWE-287 (Improper Authentication), CWE-400 (Uncontrolled Resource Consumption).
Are there public exploits for Cerberus vulnerabilities?: Yes — 9 of Cerberus's CVEs have a known public exploit.
How many critical Cerberus vulnerabilities are there?: Cerberus has 1 critical and 4 high-severity CVEs.
What is the average severity of Cerberus CVEs?: The average CVSS base score across Cerberus's scored CVEs is 5.7.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Cerberus vulnerabilities

Get an alert for each new Cerberus CVE, with AI-written analysis and remediation steps.

Create an account See pricing