NVD security advisoryHigh
High advisory for Improper limitation of pathname in the A
CVE-2026-84294 · Reported 29 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Improper limitation of pathname in the AAffected product
Advisory overview
Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.
