Known Exploited Vulnerabilities October 05, 2023 · CISA KEV Catalog

CVE-2023-40044: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2023-40044 Progress
Related: CVE-2026-8037: Progress Load Master Command Injection Vulnerability Known Exploited Vulnerabilities · Aug 07, 2026
CVE-2024-4885: Progress Whats Up Gold Path Traversal Vulnerability Known Exploited Vulnerabilities · Mar 03, 2025
CVE-2024-1212: Progress Kemp Load Master OS Command Injection Vulnerability Known Exploited Vulnerabilities · Nov 18, 2024