CVE-2026-8429510.0Critical
Improper Authentication in Progress WS_FTP Server
Progress Software · WS_FTP Server
Not in CISA KEVVendor fix available
No EPSS score yet. The score appears once FIRST publishes it.
10.0CriticalCVSS
LowMediumHighCrit.
DescriptionNVD
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.
Coverage1 article · 1 outlet
First in our coverage: SecurityOnline, 30 Oct.
- Progress patches 15 WS_FTP Server flaws, including CVE-2026-84295SecurityOnline · first in our coverage
New articles also arrive in the RSS feed.