CVE-2023-40044

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

June 17, 2026

Last Seen

October 29, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in WS_FTP Server Disclosed72.6

On September 27, 2023, Progress Software disclosed CVE-2023-40044, a .NET deserialization vulnerability in the Ad Hoc Transfer module of WS_FTP Server. This flaw allows unauthenticated attackers to execute remote commands on affected systems. The vulnerability is present in versions prior to 8.7.4 a...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical RCE Vulnerability in WS_FTP Server Disclosed

Jun 17·1 sources

Related Articles (3)

[critical] Progress WS_FTP Server: unauthenticated admin credential exposure (CVE-2026-84295, CVSS 10) and OS command injection, fixed in 2024.0.7 and 2025.0.4 pwn.watch: incident updates (Patch now) / 3h Progress Software published CVE records on Oct 29 2026 for a batch of WS_FTP Server vulnerabilities on Windows. The worst is CVE-2026-84295 (CVSS 10), improper authentication that could let an unauthenticated remote attacker access sensitive information including administrative credentials, fix

pwn.watch·4d ago

Nsa Wants To Protect Americas Ai 65c0eb42a0e6da001a37dfbd

news.risky.biz·Oct 23

Rapid7 Analysis: CVE-2023

Related Entities

Palmerworm Radio Panda Temp.Overboard BlackTech Circuit Panda Ransomware Zero-day Exploit MOVEit Campaign Progress Software Cisco Citrix Fortinet