Skip to content
OpenAdvisories
High · 7.1 CVE-2026-115340 EUVD-2026-120114GHSA-5hx3-vfg5-22h5

Insecure Storage of Web Transfer Credentials in Progress WS_FTP Server

Published Nov 9, 2026 · Updated Nov 12, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: WS_FTP Server

Description

Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations.

Affected products

VendorProductAffectedFixed
Progress Software WS_FTP Server < 2025.0.5 2025.0.5

Advisories 1

References