NVD security advisoryCritical
Critical advisory for Improper authentication in Progress Soft
CVE-2026-84295 · Reported 29 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Improper authentication in Progress SoftAffected product
Advisory overview
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.
