CVE-2026-84296
MEDIUM
MEDIUM
Priority: 0.00
BB Relevance:
54/100
Published: 2026-10-29
Modified: 2026-10-29
First seen: 2026-10-29
Status: active
Attack Surface
Network
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Network
AC:
High
PR:
Low
UI:
None
S:
Unchanged
C:
High
I:
High
A:
None
Description
Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated users to bypass MFA requirements through improper association of authentication factors between accounts.
Weakness Classification (2)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| Progress Software | WS_FTP Server | 0 < 2024.0.6 |
References & Advisories (1)
vendor-advisory