{"affected":[{"defaultStatus":"unaffected","ecosystem":"github","packageName":"OpenKermit/ckermit","product":"C-Kermit","source":"CNA: VulnCheck","vendor":"OpenKermit","versions":[{"lessThan":"11.1.515","status":"affected","version":"6.0.192","versionType":"semver"}]}],"cveId":"CVE-2026-129119","cwes":["CWE-863"],"description":"C-Kermit from 6.0.192 before 11.1.515 contains a file collision protection bypass that allows malicious senders to append data to existing files by marking transfers as RESEND. The gattr() function in ckcfn3.c clears the REJECT discard flag and switches to APPEND without a RECEIVE CONFIRM prompt, letting attackers modify files such as shell startup files.","epss":null,"exploits":[{"kind":"exploit","source":"ADP: CISA-ADP","url":"https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj"}],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","version":"4.0"},{"score":6.5,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"},{"score":7.1,"severity":"high","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"},{"score":6.5,"severity":"medium","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","version":"3.1"}],"modifiedAt":1794608243803,"publishedAt":1794587026712,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/OpenKermit/ckermit/commit/bbf9923e3e2e04ac3da713998cb15e786e26fdf1"},{"source":"CNA: VulnCheck","tags":["release-notes"],"url":"https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcfn3.c#L1798-L1800"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/c-kermit-6.0.192-before-11.1.515-file-collision-protection-bypass-via-resend"},{"source":"ADP: CISA-ADP","tags":["exploit"],"url":"https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/OpenKermit/ckermit/blob/v11.0.514/ckcfn3.c#L1798-L1800"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/OpenKermit/ckermit/commit/bbf9923e3e2e04ac3da713998cb15e786e26fdf1"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/OpenKermit/ckermit/releases/tag/v11.1.515"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://www.vulncheck.com/advisories/c-kermit-6.0.192-before-11.1.515-file-collision-protection-bypass-via-resend"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":[],"url":"https://github.com/OpenKermit/ckermit/security/advisories/GHSA-vhrv-7jrq-95qj"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/OpenKermit/ckermit/commit/bbf9923e3e2e04ac3da713998cb15e786e26fdf1"}],"revision":"84dcdf3b0042e6663e80d00773cccfb0220cdd8fe186cd84e67db5097b679eda","sources":[{"modifiedAt":1794604341062,"name":"CNA: VulnCheck","retrievedAt":1794607775964,"url":"https://www.cve.org/CVERecord?id=CVE-2026-129119"},{"modifiedAt":1794608243803,"name":"NVD","retrievedAt":1794615551004,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-129119"}],"ssvc":{"assessedAt":1794604319470,"automatable":"no","exploitation":"poc","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"C-Kermit 6.0.192 before 11.1.515 File Collision Protection Bypass via RESEND","updatedAt":1794615551004}