Progress WS_FTP flaws could allow system compromise
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Progress has disclosed multiple vulnerabilities in its WS_FTP file-transfer server, including a maximum-severity flaw (CVE-2026-84295, CVSS 10.0) that lets unauthenticated network attackers steal sensitive data, including admin credentials. Fixed versions are 2024.0.7 and 2025.0.4, with admins urged to patch promptly, given past mass exploitation of similar file-transfer software.