Progress patches five high-severity flaws in WS_FTP Server
The recommended build is 2025.0.5, also called 10.0.5; the notice reports no active exploitation.
62
CVE-2026-115339
Unauthenticated DoS in Progress WS_FTP Server before 2025.0.5
- CVSS 3.1
- 7.5 high
- EPSS
- —
- Published
- ·
- Modified
AI analysisSummaries by Vani AI
Progress WS_FTP Server on Windows does not adequately limit resources. An unauthenticated remote attacker can cause a denial of service over the network, with no user interaction. Availability is lost; confidentiality and integrity are not affected. Releases before 2025.0.5 are affected.
What to do: Upgrade WS_FTP Server to 2025.0.5.
| Product | Affected | Fixed in |
|---|---|---|
| Progress Software WS_FTP Server | prior to 2025.0.5 | 2025.0.5 |
Estimated exposure
No basis for an estimate.
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
Insufficient resource limits in Progress Software WS_FTP Server releases prior to 2025.0.5 on Windows could allow an unauthenticated remote attacker to cause denial of service.
- Weakness
- CWE-770
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H