CVE-2026-28295 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2026-28295 Interim 1 1 2026-03-05T00:14:52Z current 2026-03-05T00:14:52Z 2026-03-05T00:14:52Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2026-28295 A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Server 15 SP6-LTSS SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP6 SUSE Linux Enterprise Module for Desktop Applications 15 SP7 SUSE Linux Enterprise Server for SAP applications 16.0 openSUSE Leap 15.6 openSUSE Tumbleweed gvfs gvfs-1.58.2-1.1 gvfs-32bit gvfs-backend-afc gvfs-backend-afc-1.58.2-1.1 gvfs-backend-goa gvfs-backend-goa-1.58.2-1.1 gvfs-backend-gphoto-1.58.2-1.1 gvfs-backend-samba gvfs-backend-samba-1.58.2-1.1 gvfs-backends gvfs-backends-1.58.2-1.1 gvfs-devel gvfs-fuse gvfs-fuse-1.58.2-1.1 gvfs-lang gvfs-lang-1.58.2-1.1 gvfs-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs-backend-afc-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs-backend-goa-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs-backend-gphoto-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs-backend-samba-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs-backends-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs-fuse-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs-lang-1.58.2-1.1 as a component of openSUSE Tumbleweed gvfs as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS gvfs-backends as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS gvfs-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS gvfs-fuse as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS gvfs-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS gvfs as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gvfs-backends as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gvfs-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gvfs-fuse as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gvfs-lang as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gvfs as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 gvfs-backend-afc as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 gvfs-backend-samba as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 gvfs-backends as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 gvfs-devel as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 gvfs-fuse as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 gvfs-lang as a component of SUSE Linux Enterprise Module for Desktop Applications 15 SP7 gvfs as a component of SUSE Linux Enterprise Server 12 SP2-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 12 SP2-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 12 SP2-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 12 SP2-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 12 SP2-LTSS gvfs as a component of SUSE Linux Enterprise Server 12 SP4-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 12 SP4-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 12 SP4-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 12 SP4-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 12 SP4-LTSS gvfs as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gvfs-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gvfs as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security gvfs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gvfs-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 15 SP1-LTSS gvfs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise Server 15 SP2-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 15 SP2-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 15 SP2-LTSS gvfs-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 15 SP2-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 15 SP2-LTSS gvfs as a component of SUSE Linux Enterprise Server 15 SP3-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise Server 15 SP3-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 15 SP3-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 15 SP3-LTSS gvfs-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 15 SP3-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 15 SP3-LTSS gvfs as a component of SUSE Linux Enterprise Server 15 SP4-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise Server 15 SP4-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 15 SP4-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 15 SP4-LTSS gvfs-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 15 SP4-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 15 SP4-LTSS gvfs as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gvfs-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gvfs as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gvfs-backend-afc as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gvfs-backend-samba as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gvfs-backends as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gvfs-devel as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gvfs-fuse as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gvfs-lang as a component of SUSE Linux Enterprise Server 15 SP6-LTSS gvfs as a component of SUSE Linux Enterprise Server 16.0 gvfs-backends as a component of SUSE Linux Enterprise Server 16.0 gvfs-fuse as a component of SUSE Linux Enterprise Server 16.0 gvfs-lang as a component of SUSE Linux Enterprise Server 16.0 gvfs as a component of SUSE Linux Enterprise Server Teradata 12 SP3 gvfs as a component of SUSE Linux Enterprise Server Teradata 15 SP4 gvfs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 gvfs-backend-afc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 gvfs-backend-samba as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 gvfs-backends as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 gvfs-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 gvfs-fuse as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 gvfs-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 gvfs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gvfs-backend-afc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gvfs-backend-samba as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gvfs-backends as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gvfs-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gvfs-fuse as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gvfs-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gvfs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gvfs-backend-afc as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gvfs-backend-samba as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gvfs-backends as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gvfs-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gvfs-fuse as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gvfs-lang as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP6 gvfs as a component of SUSE Linux Enterprise Server for SAP applications 16.0 gvfs-backends as a component of SUSE Linux Enterprise Server for SAP applications 16.0 gvfs-fuse as a component of SUSE Linux Enterprise Server for SAP applications 16.0 gvfs-lang as a component of SUSE Linux Enterprise Server for SAP applications 16.0 gvfs as a component of openSUSE Leap 15.6 gvfs-32bit as a component of openSUSE Leap 15.6 gvfs-backend-afc as a component of openSUSE Leap 15.6 gvfs-backend-goa as a component of openSUSE Leap 15.6 gvfs-backend-samba as a component of openSUSE Leap 15.6 gvfs-backends as a component of openSUSE Leap 15.6 gvfs-devel as a component of openSUSE Leap 15.6 gvfs-fuse as a component of openSUSE Leap 15.6 gvfs-lang as a component of openSUSE Leap 15.6 A flaw was found in the FTP GVfs backend. A malicious FTP server can exploit this vulnerability by providing an arbitrary IP address and port in its passive mode (PASV) response. The client unconditionally trusts this information and attempts to connect to the specified endpoint, allowing the malicious server to probe for open ports accessible from the client's network. CVE-2026-28295 openSUSE Tumbleweed:gvfs-1.58.2-1.1 openSUSE Tumbleweed:gvfs-backend-afc-1.58.2-1.1 openSUSE Tumbleweed:gvfs-backend-goa-1.58.2-1.1 openSUSE Tumbleweed:gvfs-backend-gphoto-1.58.2-1.1 openSUSE Tumbleweed:gvfs-backend-samba-1.58.2-1.1 openSUSE Tumbleweed:gvfs-backends-1.58.2-1.1 openSUSE Tumbleweed:gvfs-fuse-1.58.2-1.1 openSUSE Tumbleweed:gvfs-lang-1.58.2-1.1 moderate 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N