MEDIUM 6.3 NVD

CVE-2026-115337

Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to byp

Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to bypass access restrictions and access or modify files belonging to other users.

References

https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2026

Published: 2026-11-09 · Source: NVD · Feed updated: 2026-11-10

This medium severity vulnerability with a CVSS score of 6.3 was published on 2026-11-09 via NVD.

vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.