← Database

CVE-2026-84295

CRITICAL CVSS: 10.0 Published: 2026-10-29 Modified: 2026-10-29

Description

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.

Affected Platforms

Unknown

Weakness Type

CWE-287, CWE-522

References