CVE-2026-84295
Last modified
CVE-2026-84295 is a critical-severity vulnerability rated 10/10 on the CVSS scale. Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.. EPSS estimates a 0.55% chance of exploitation in the next 30 days.
Description
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Progress Software | WS_FTP Server | < 2024.0.6; < 2025.0.3 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-84295?
How severe is CVE-2026-84295?
How do I fix CVE-2026-84295?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-84289A vulnerability was found in NousResearch hermes-agent up to…4.3
- CVE-2026-8429SPIP versions prior to 4.4.14 contain a remote code executio…8.8
- CVE-2026-84290IBM Guardium Data Protection 12.0, 12.1, 12.2 is affected by…5.1
- CVE-2026-84292fast-uri serializes the port component of a URI without vali…7.5
- CVE-2026-84293The Repeater Fields for Gravity Forms plugin for WordPress i…7.2
- CVE-2026-84294Improper limitation of pathname in the Ad Hoc Transfer compo…7.7
- CVE-2026-84296Multi-Factor Authentication Bypass vulnerability in SSH comp…6.8
- CVE-2026-84298Hatchet is a platform for orchestrating background tasks, AI…3.1
- CVE-2026-8430SPIP versions prior to 4.4.14 contain a remote code executio…9.2
- CVE-2026-84301FastGPT is an open-source LLM platform for building AI appli…6.3
- CVE-2026-84302Discourse is an open-source discussion platform. Prior to 20…4.2
- CVE-2026-84303gRPC-Go is the Go language implementation of gRPC. Prior to …6.3
Are you affected by CVE-2026-84295?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST