CVE-2026-115337

CVSS 6.3 (medium) · published 2026-11-09

Improper access control in Progress WS_FTP Server versions prior to 2025.0.5 could allow an authenticated user with certain folder-management permissions to bypass access restrictions and access or modify files belonging to other users.

Weakness: CWE-863

Source: NVD CVE-2026-115337

References

• https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2026

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.