HIGH 7.7 NVD

CVE-2026-115341

Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows could allow an a

Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope.

References

https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2026

Published: 2026-11-09 · Source: NVD · Feed updated: 2026-11-10

This high severity vulnerability with a CVSS score of 7.7 was published on 2026-11-09 via NVD.

vulnfeed aggregates 17092 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.