Vulnerabilities

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote…

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Progress Software

Product

WS_FTP Server

CVSS v3.1

10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

0.006 (p46)

Weakness

CWE-287, CWE-522

Exposure class

File transfer

NVD status

Awaiting Analysis

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-84295 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 21
   CVE NVD 2d ago

   Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow…

   CVSS 4.3 CVE-2026-90862 Progress Software