CVE-2025-4236

CVE-2025-4236 is a critical buffer overflow vulnerability affecting PCMan FTP Server version 2.0.7, specifically within an unknown functionality of its MDIR Command Handler. This flaw allows for remote exploitation without authentication, enabling attackers to achieve high impact across confidentiality, integrity, and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, nor are there readily available exploit modules in common frameworks like Metasploit or Nuclei. Despite its critical CVSS score of 9.8, community discussion and media coverage remain minimal.