CyberSec.Space Logo
Back to CVE Browser

CVE-2023-40044

🔥 Known Exploited (CISA KEV)CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-09-27
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

Affected Platforms (CPE)

📦
Progress

Ws Ftp Server

< 8.7.4>= 8.8 and < 8.8.2

References & Advisories

🔗 http://packetstormsecurity.com/files/174917/Progress-Software-WS_FTP-Unauthenticated-Remote-Code-Execution.html
🔗 https://attackerkb.com/topics/bn32f9sNax/cve-2023-40044
🔗 https://censys.com/cve-2023-40044/
🔗 https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023
🔗 https://www.assetnote.io/resources/research/rce-in-progress-ws-ftp-ad-hoc-via-iis-http-modules-cve-2023-40044
🔗 https://www.progress.com/ws_ftp
🔗 https://www.rapid7.com/blog/post/2023/09/29/etr-critical-vulnerabilities-in-ws_ftp-server/
🔗 https://www.theregister.com/2023/10/02/ws_ftp_update/

Related Security Intelligence Articles

Weekly Cybersecurity News: Jul 27, 2026

Weekly cybersecurity news covering active exploitation of Check Point SmartConsole CVE-2026-16232, Qilin ransomware leveraging PAN-OS GlobalProtect vulnerabilities, Russian LAUNDRY BEAR targeting Zimbra email servers, and FakeGit malicious repositories.

2026-07-27

Global Cyber Intel Digest: July 24, 2026

This digest covers active exploitation of Check Point CVE-2026-16232 SmartConsole authentication bypass, Russian LAUNDRY BEAR targeting Zimbra vulnerabilities, malicious Claude Desktop ad campaigns deploying SectopRAT, and Chaos ransomware msaRAT operations.

2026-07-24

Global Cyber Intel Digest: July 22, 2026

Coverage of active exploitation targeting on-premise Microsoft SharePoint CVE-2026-50522, Qilin ransomware leveraging PAN-OS CVE-2026-0257 GlobalProtect authentication bypass, and critical security patch updates across enterprise networking hardware.

2026-07-22

Related Vulnerabilities

CVE-2025-15662

The Printcart Web to Print Product Designer for WooCommerce WordPress plugin before 2.5.3 does not restrict a user-supplied URL be...

CVE-2026-174582.1

A vulnerability was found in mf-yang openclaw-cn up to 0.2.1. This affects the function clickViaPlaywright of the file src/browser...

CVE-2026-174342.1

A flaw has been found in nanocoai NanoClaw up to 2.0.64. Affected is the function handleAddMcpServer of the file src/modules/self-...

CVE-2026-174331.9

A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. This impacts the function createChatSdkBridge.setup of the file sr...