CVE-2026-115341

Published 9 November 2026 · tracked since 10 November 2026

Description

Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-123371
• CVE-2026-123370
• CVE-2026-123369
• CVE-2026-123368
• CVE-2026-124683
• CVE-2026-123364
• CVE-2026-121687
• CVE-2026-121576 HIGH 8.8
• CVE-2026-115340 HIGH 7.1
• CVE-2026-115339 HIGH 7.5

→ Open the live CVE board · all tools