WS
Product
WS_FTP Server
by Progress Software · last CVE Oct 29, 2026
9
CVEs
0
On KEV
9.9
Max CVSS
8
New 30D
Severity mix
Critical 3High 2Medium 4Low 0
Watch

Add WS_FTP Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-90872
New
6.6–Oct 29
Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server
Affected: before 2024.0.7; before 2025.0.4
CVE-2024-9999
6.5
0%
Nov 12
Multi-Factor Authentication Bypass in Progress WS_FTP Server
Affected: before 8.8.9
CVE-2026-90871
New
5.3–Oct 29
Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server
Affected: before 2024.0.7; before 2025.0.4
CVE-2026-90870
New
5.3–Oct 29
Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server
Affected: before 2024.0.7; before 2025.0.4
Showing 4