A ProFTPD ACL bypass (CVE-2026-35025, CVSS 8.6) lets logged-in FTP users reach files in restricted directories. No patch is out yet; use DefaultRoot.
ACL Bypass
BIND 9 patches 3 flaws including a sneaky ACL bypass (CVE-2026-3591) and a High-severity CPU exhaustion bug. Secure your DNS infrastructure now.