Skip to content

CVE record · 1 source

CVE-2026-84294

CVSS 7.7

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on…

Vendor: Progress Software
Product: WS_FTP Server
CVSS v3.1: 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
EPSS: 0.004 (p29)
Weakness: CWE-22
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 2d ago

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on…

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.

CVSS 7.7 CVE-2026-84294 Progress Software