ws_ftp_server vulnerabilities

CVEs whose affected-version data names the ws_ftp_server package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84294High· 7.7

5d ago

Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.

▾ TwilightProgress Software · WS_FTP ServerEPSS 0.35%via CVEORG