Skip to content
OpenAdvisories
High · 7.5 CVE-2026-115339 EUVD-2026-120113GHSA-r5wv-jw69-xvqc

Unauthenticated XFT Memory Exhaustion in Progress WS_FTP Server

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ProgressSoftware

Description

Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service.

Affected products

VendorProductAffectedFixed
Progress Software WS_FTP Server < 2025.0.5 2025.0.5

Advisories 1

References