Skip to content
OpenAdvisories
High · 7.7 CVE-2026-84294 EUVD-2026-113010GHSA-qphh-2fw4-cg95

Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server

Published Oct 29, 2026 · Updated Nov 5, 2026 · Assigned by ProgressSoftware

Vendor: Progress Software Product: WS_FTP Server

Description

Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.

Affected products

VendorProductAffectedFixed
Progress Software WS_FTP Server < 2024.0.6, < 2025.0.3 2024.0.6

Advisories 1

References