CVE-2026-84295
Progress Software WS_FTP Server
Published 29 Oct 2026 · updated 30 Oct 2026 · Awaiting Analysis
10.0 Critical · CVSS 3.1, progress.com
Description
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.