Filezilla client

This hub aggregates every CVE we track for Filezilla client, a product in the consumer software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 7 most recently published vulnerabilities affecting Filezilla client.

• CVE-2019-25683FileZilla 3.40.0 Denial of Service via Local Search6.2Apr 5, 2026
• CVE-2023-53959FileZilla Client 3.63.1 DLL Hijacking via Missing TextShaping.dll9.8Dec 19, 2025
• CVE-2024-31497In PuTTY 0.68 through 0.80 before 0.81, biased ECDSA nonce generation allows an attacker to recover a user's NIST P-521 secret key via a quick attack in approximately 60 signatures. This is especia...5.9Apr 15, 2024
• CVE-2023-48795The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (fr...5.9Dec 18, 2023
• CVE-2016-15003FileZilla Client Installer uninstall.exe unquoted search path6.3Jul 18, 2022
• CVE-2022-29620FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability6.5Jun 7, 2022
• CVE-2019-5429Untrusted search path in FileZilla before 3.41.0-rc1 allows an attacker to gain privileges via a malicious 'fzsftp' binary in the user's home directory.7.8Apr 29, 2019