CVE-2026-84295

Summary

Unauthenticated remote attackers can bypass authentication in affected WS_FTP Server versions to access sensitive information, including administrative credentials, due to improper authentication enforcement.

Exploitability

Exploitation is trivial for unauthenticated attackers as no prior access or user interaction is required.

Blast radius

Successful exploitation could lead to full system compromise, including credential theft and unauthorized administrative control across all affected servers.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to WS_FTP Server version 2024.0.6 or 2025.0.3 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.