CVE-2016-6460

CVE-2016-6460 describes a vulnerability in the FTP REST API of Cisco Firepower System Software, allowing unauthenticated, remote attackers to bypass FTP malware detection rules and download malware. This impacts devices configured with a file policy for malware blocking on FTP connections. With a CVSS score of 7.5 (High), this vulnerability requires no user interaction or privileges, enabling a network-based attack to achieve high integrity impact (malware delivery) without confidentiality or availability impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.