Medium 6.8

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP...

CVE-2026-84296 First seen on SecPulse 00:46

Affected packages

Ecosystem	Package	Affected	Fixed
Progress Software	WS_FTP Server	< 2024.0.6 < 2025.0.3	2024.0.6 2025.0.3

Original description The description as published by the source.

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated users to bypass MFA requirements through improper association of authentication factors between accounts.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Medium 6.8; CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
Published: Oct 30, 2026
First seen on SecPulse: 00:46
GHSA: GHSA-47gc-942j-729j
CWE: CWE-287

NVD GitHub Advisory

Tags(click for explanation)

Attack Types

Authentication Bypass

CWE

CWE-303 CWE-287

All

Progress Software

Products

Ws Ftp Server

Detection sources

NIST National Vulnerability Database01:24
GitHub Security Advisories (Global)03:31
CVE.org (CVE Program・cvelistV5)00:46