CVE-2026-84295EUVD-2026-113016
Improper Authentication in Progress WS_FTP Server
- Published
- Last modified
- Status
- published
- Known exploitation
- Not listed in CISA KEV
- Fix
- Fixed in 2024.0.6, 2025.0.3
- Public exploit
- None on Exploit-DB, Metasploit or GitHub
Summary
Progress WS_FTP Server, a file transfer product for Windows, is affected by this vulnerability. An unauthenticated remote attacker could exploit the flaw to access sensitive information, including administrative credentials.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.
Affected versions
- Progress Software WS_FTP Server
fixed in 2024.0.6; fixed in 2025.0.3