NetSight
medium6.8

CVE-2026-84296

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows…

Impact

Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated users to bypass MFA requirements through improper association of authentication factors between accounts.

Affected products

ProductAffected versions
Progress Software WS FTP Server
before 2024.0.6

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References