All security reports
NVD security advisoryCritical

Critical advisory for Improper authentication in Progress Soft

CVE-2026-84295 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Improper authentication in Progress SoftAffected product

Advisory overview

Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account