{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/ws_ftp-server--2025.0.5/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-115339"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WS_FTP Server (\u003c 2025.0.5)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Progress Software"],"content_html":"\u003cp\u003eProgress Software WS_FTP Server versions prior to 2025.0.5 contain a vulnerability regarding insufficient resource limits. This flaw allows an unauthenticated remote attacker to cause a denial of service (DoS) on affected Windows-based systems. As of this report, the specific mechanics of the resource exhaustion (e.g., connection flooding or memory exhaustion) have not been detailed by the vendor or NVD.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation results in a denial of service, rendering the WS_FTP service unresponsive to legitimate users.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch affected systems by upgrading to WS_FTP Server version 2025.0.5 or later.\u003c/li\u003e\n\u003cli\u003eAudit internet-facing WS_FTP Server instances to ensure they are not accessible to unauthorized networks until patching is completed.\u003c/li\u003e\n\u003cli\u003eMonitor service logs for an anomalous spikes in connection requests or sudden service termination events that may indicate exploitation attempts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T21:59:11Z","date_published":"2026-11-09T21:59:11Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ws-ftp-dos/","summary":"An unauthenticated remote attacker can trigger a denial of service condition in Progress Software WS_FTP Server versions prior to 2025.0.5 by exploiting insufficient resource limits.","title":"Progress Software WS_FTP Server: Denial of service via insufficient resource limits (CVE-2026-115339)","url":"https://feed.craftedsignal.io/briefs/2026-11-ws-ftp-dos/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.7,"id":"CVE-2026-115341"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WS_FTP Server (\u003c 2025.0.5)"],"_cs_severities":["high"],"_cs_tags":["web-application","path-traversal","windows"],"_cs_type":"advisory","_cs_vendors":["Progress Software"],"content_html":"\u003cp\u003eProgress Software WS_FTP Server versions prior to 2025.0.5 contain a vulnerability in the Thin Client Web Transfer component. An authenticated user can exploit improper access restrictions to access files outside of their designated directory boundaries. This vulnerability is assigned CVE-2026-115341.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAuthenticated attackers may gain unauthorized access to sensitive files on the underlying Windows filesystem that are otherwise restricted by the application configuration.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpdate Progress Software WS_FTP Server to version 2025.0.5 or later. Organizations should monitor Thin Client Web Transfer logs for directory traversal patterns such as \u0026quot;../\u0026quot; sequences in request paths from authenticated user sessions.\u003c/p\u003e\n","date_modified":"2026-11-09T19:57:07Z","date_published":"2026-11-09T19:57:07Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ws-ftp-traversal/","summary":"An improper access restriction vulnerability in the Thin Client Web Transfer component of Progress Software WS_FTP Server allows authenticated users to perform unauthorized path traversal to access files outside their intended scope.","title":"Progress Software WS_FTP Server: Path traversal in Thin Client Web Transfer (CVE-2026-115341)","url":"https://feed.craftedsignal.io/briefs/2026-11-ws-ftp-traversal/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:progress_software:ws_ftp_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.1,"id":"CVE-2026-115340"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WS_FTP Server (\u003c 2025.0.5)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Progress Software"],"content_html":"\u003cp\u003eProgress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations.\u003c/p\u003e\n","date_modified":"2026-11-09T17:50:28Z","date_published":"2026-11-09T17:50:28Z","id":"https://feed.craftedsignal.io/briefs/2026-11-wsftp-temp-cred-exposure/","summary":"Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows may write sensitive user credential and session data to a temporary file during file transfer operations.","title":"Progress Software WS_FTP Server: Sensitive credential and session data exposure (CVE-2026-115340)","url":"https://feed.craftedsignal.io/briefs/2026-11-wsftp-temp-cred-exposure/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:progress:ws_ftp_server:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-115338"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WS_FTP Server (\u003c 2025.0.5)"],"_cs_severities":["high"],"_cs_tags":["vulnerability","network-security","man-in-the-middle"],"_cs_type":"advisory","_cs_vendors":["Progress"],"content_html":"\u003cp\u003eProgress WS_FTP Server versions prior to 2025.0.5 contain a vulnerability where communications are insufficiently protected. This flaw allows a network attacker positioned to observe or intercept traffic to conduct man-in-the-middle attacks. An attacker can intercept sensitive information or modify requests if the server is configured to allow or fall back to unencrypted connections.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the interception of sensitive data transmitted over the network and the modification of client-to-server requests, potentially compromising credentials or file transfer integrity.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePatch Progress WS_FTP Server to version 2025.0.5 or later immediately.\u003c/li\u003e\n\u003cli\u003eAudit WS_FTP Server configurations to disable support for unencrypted connections (e.g., ensure mandatory TLS/SSL usage for all listeners).\u003c/li\u003e\n\u003cli\u003eInventory all internet-facing instances of Progress WS_FTP Server.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-09T17:50:18Z","date_published":"2026-11-09T17:50:18Z","id":"https://feed.craftedsignal.io/briefs/2026-11-ws-ftp-insecure-comm/","summary":"Progress WS_FTP Server versions prior to 2025.0.5 are vulnerable to man-in-the-middle attacks, allowing network attackers to intercept or modify traffic when unencrypted connections are permitted.","title":"Progress WS_FTP Server: Insufficient protection of communications (CVE-2026-115338)","url":"https://feed.craftedsignal.io/briefs/2026-11-ws-ftp-insecure-comm/"}],"language":"en","title":"CraftedSignal Threat Feed - WS_FTP Server (\u003c 2025.0.5)","version":"https://jsonfeed.org/version/1.1"}