PT-2026-140442

CVE-2026-115338

·

Published

2026-11-09

·

Updated

2026-11-10

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Insufficient protection of communications in Progress WS FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive information or modify requests when unencrypted connections are used.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-319: Cleartext Transmission of Sensitive Information
CWE-345: Insufficient Verification of Data Authenticity
Related identifiers
CVE-2026-115338
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com