{"id":"CVE-2026-115338","published":"2026-11-09T17:17:11.240","lastModified":"2026-11-10T05:17:46.840","description":"Insufficient protection of communications in Progress WS_FTP Server versions prior to 2025.0.5 could allow a network attacker to intercept sensitive information or modify requests when unencrypted connections are used.","cvssScore":8.1,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-319","CWE-345"],"vendors":[],"products":[],"references":[{"url":"https://community.progress.com/s/article/WS-FTP-Server-Service-Pack-November-2026","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}