WS
Product
WS_FTP Server
by Progress Software · last CVE Oct 29, 2026
16
CVEs
0
On KEV
10.0
Max CVSS
15
New 30D
Severity mix
Critical 6High 3Medium 7Low 0
Watch

Add WS_FTP Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84295
New
10.0–Oct 29
Improper Authentication in Progress WS_FTP Server
Affected: before 2024.0.6; before 2025.0.3
CVE-2026-90868
New
9.9–Oct 29
OS Command Injection in Progress WS_FTP Server
Affected: before 2024.0.7; before 2025.0.4
CVE-2026-90866
New
9.1–Oct 29
Virtual Folder Path Confinement Bypass in Progress WS_FTP Server
Affected: before 2024.0.7; before 2025.0.4
CVE-2026-90864
New
9.1–Oct 29
Host Administrator Path Containment Bypass in Progress WS_FTP Server
Affected: before 2024.0.7; before 2025.0.4
CVE-2026-90863
New
9.1–Oct 29
Privilege Escalation via Missing Authorization in WS_FTP Manager
Affected: before 2024.0.7; before 2025.0.4
CVE-2026-90865
New
9.0–Oct 29
Command Injection via FTP Notification Variables in Progress WS_FTP Server
Affected: before 2024.0.7; before 2025.0.4
Showing 6