Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (49 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-115336 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-11-09 6.5 Medium
Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service.
CVE-2026-115337 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-11-09 6.3 Medium
Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to bypass access restrictions and access or modify files belonging to other users.
CVE-2026-115341 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-11-09 7.7 High
Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope.
CVE-2026-115339 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-11-09 7.5 High
Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service.
CVE-2026-115340 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-11-09 7.1 High
Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations.
CVE-2026-115338 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-11-09 8.1 High
Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive information or modify requests when unencrypted connections are used.
CVE-2026-84294 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-11-05 7.7 High
Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.
CVE-2026-90872 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 6.6 Medium
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an authenticated Manager administrator to execute arbitrary commands with the privileges of the WS_FTP Server IIS worker process.
CVE-2026-90871 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 5.3 Medium
Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated attacker to affect files outside the intended directory.
CVE-2026-90870 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 5.3 Medium
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead to server resource exhaustion and service degradation.
CVE-2026-90869 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 7.5 High
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows.
CVE-2026-90868 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.9 Critical
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.
CVE-2026-90867 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 8.1 High
Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts.
CVE-2026-90866 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.
CVE-2026-90865 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9 Critical
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.
CVE-2026-90864 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope.
CVE-2026-90863 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and complete compromise of the underlying server.
CVE-2026-90862 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 4.3 Medium
Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements.
CVE-2026-90861 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 6.6 Medium
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.
CVE-2026-84296 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 6.8 Medium
Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated users to bypass MFA requirements through improper association of authentication factors between accounts.