← Database

CVE-2026-84294

HIGH CVSS: 7.7 Published: 2026-10-29 Modified: 2026-10-29

Description

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.

Affected Platforms

Unknown

Weakness Type

CWE-22

References