CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115336
MEDIUMCVSS 6.5NVD feed
Published 9 November 2026 · tracked since 10 November 2026
Description
Incorrect quota accounting in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an authenticated user with upload and delete permissions to exceed storage quotas, potentially causing denial of service.
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog