CVE-2026-84294
HIGH
NVD
CVSS Score
7.7
Severity
HIGH
Published
Oct 29, 2026
Vendor
unknown
Description
Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.