All security reports
NVD security advisoryHigh

High advisory for Improper limitation of pathname in the A

CVE-2026-84294 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Improper limitation of pathname in the AAffected product

Advisory overview

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions p | Security report | Cevnitra