Product by Progress Software
Ws FTP Server
15 known vulnerabilities in Ws FTP Server (Progress Software), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-90868 | OS Command Injection in Progress WS_FTP Server | 9.9 | |
| Critical | CVE-2026-90865 | Command Injection via FTP Notification Variables in Progress WS_FTP Server | 9.0 | |
| Critical | CVE-2026-90866 | Virtual Folder Path Confinement Bypass in Progress WS_FTP Server | 9.1 | |
| Critical | CVE-2026-84295 | Improper Authentication in Progress WS_FTP Server | 10.0 | |
| Critical | CVE-2026-90863 | Privilege Escalation via Missing Authorization in WS_FTP Manager | 9.1 | |
| Critical | CVE-2026-90864 | Host Administrator Path Containment Bypass in Progress WS_FTP Server | 9.1 | |
| High | CVE-2026-90867 | Improper Access Control of Web Admin Console in Progress WS_FTP Server | 8.1 | |
| High | CVE-2026-84294 | Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server | 7.7 | |
| High | CVE-2026-90869 | Progress Software WS_FTP Server: Out-of-bounds Read | 7.5 | |
| Medium | CVE-2026-84296 | SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server | 6.8 | |
| Medium | CVE-2026-90861 | Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server | 6.6 | |
| Medium | CVE-2026-90872 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server | 6.6 | |
| Medium | CVE-2026-90870 | Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server | 5.3 | |
| Medium | CVE-2026-90871 | Progress Software WS_FTP Server: Path Traversal | 5.3 | |
| Medium | CVE-2026-90862 | Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server | 4.3 |