CVE-2009-4644: Accellion Secure File Transfer Appliance before 8_0_105 allows remote authenticated administrators to bypas...

Security readout for executives and security teams

CVE-2009-4644 affects Accellion Secure File Transfer Appliance versions before 8_0_105. An authenticated remote administrator could break out of the restricted shell and run operating-system commands. This is most urgent where the appliance is still deployed, internet-accessible, or administered by many privileged users. Exposure is limited to Accellion Secure File Transfer Appliance deployments before 8_0_105 where an attacker has remote administrator credentials. Risk increases if administrative access is broadly reachable or credentials are weak, shared, or compromised. Treat this as a targeted privileged-access risk, not a broad unauthenticated emergency. Prioritize confirmation if Accellion FTA remains in the environment, especially around sensitive file-transfer workflows. Mitigation focus: Identify any Accellion Secure File Transfer Appliance instances still in use.; Verify whether each appliance is running 8_0_105 or later.; Restrict administrative access to trusted networks and named administrators..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.