Skip to content
Sign in

Progress product

WS_FTP Server

Alert
No CISA KEV deadline is open. CISA last added a WS_FTP Server CVE on 5 Oct 2023.

Tracked since 30 Oct · latest article 30 Oct · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 1 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

1Articles · 7 days

usual rate

Exploited, by due date1

WS_FTP Server CVEs in CISA KEV with their federal deadlines. None is open.

Exploited WS_FTP Server CVEs
CVEProductAddedFederal deadlineArticles
In CISA KEVCVE-2023-40044RansomwareWS_FTP Server5 OctPassed 26 Oct–
Vendor CSV of 9 entries for ProgressAll 9 vendor entries, including other products.

Patch cadence and exploit odds

How often CISA adds WS_FTP Server CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

0Q1 ’250Q2 ’250Q3 ’250Q4 ’250Q1 ’260Q2 ’260Q3 ’260Q4 ’26
Show as table
Added to CISA KEV per quarter
QuarterAdded
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

No additions in the last eight quarters.

Fix listed

6 of 6 CVEs in coverage

Every CVE in coverage has a fix recorded.

EPSS percentile of each CVE

No EPSS scores are recorded for these CVEs.

Coverage1 article · all time

The latest article naming WS_FTP Server, in the shared story grammar.

Full timeline
Developinglatest 2 hours ago1 article1 outlet

1 article from 1 outlet since 30 Oct. Still developing; the latest report was 2 hours ago.

Now30 OctFirst reportSecurityOnline · 30 Oct, 04:30
  • Fri 30 Oct, 04:30 UTC. SecurityOnline, first report. Progress patches 15 WS_FTP Server flaws, including CVE-2026-84295.
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
Show all 1 articles as a list
  1. Fri 30 OctDay 01
    1. Progress patches 15 WS_FTP Server flaws, including CVE-2026-8429504:30 · SecurityOnline · First report

All CVEs in coverage6

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-90866

    Virtual Folder Path Confinement Bypass in Progress WS_FTP Server

    9.1Critical1 article
  • CVE-2026-90864

    Host Administrator Path Containment Bypass in Progress WS_FTP Server

    9.1Critical1 article
  • CVE-2026-90863

    Privilege Escalation via Missing Authorization in WS_FTP Manager

    9.1Critical1 article
  • CVE-2026-90865

    Command Injection via FTP Notification Variables in Progress WS_FTP Server

    9.0Critical1 article
  • CVE-2026-90868

    OS Command Injection in Progress WS_FTP Server

    9.9Critical1 article
  • CVE-2026-84295

    Improper Authentication in Progress WS_FTP Server

    10.0Critical1 article
CyberSIXTSignal over noise
Updated AboutDevelopersSign in