Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-115336 EUVD-2026-120110GHSA-7x5c-9cmp-g47f

FTP Quota Accounting Bypass in Progress WS_FTP Server

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ProgressSoftware

Description

Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service.

Affected products

VendorProductAffectedFixed
Progress Software WS_FTP Server 2025.0.0 – < 2025.0.5 2025.0.5

Advisories 1

References