---
id: "CVE-2023-40044"
kind: "vulnerability"
aliases: ["CVE-2023-40044"]
title: "progress ws ftp server: In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET\u2026"
severity: "critical"
cvss: 10.0
epss: null
exploited: true
status: "open"
category: "other"
products: [{"name": "Progress WS_FTP Server", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "progress ws ftp server", "fixed": ["8.7.4"], "affected": "< 8.7.4", "ecosystem": "vendor"}, {"name": "progress ws ftp server", "fixed": ["8.8.2"], "affected": ">= 8.8, < 8.8.2", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "file-transfer", "other", "ransomware", "windows", "ws_ftp_server"]
not_affected_if: ["no-ws-ftp-server-deployed"]
published_at: "2023-09-27T15:18:57+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T22:29:04+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40044", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# progress ws ftp server: In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET…

Progress WS_FTP Server has a deserialization flaw in its Ad Hoc Transfer module that lets an authenticated user run remote commands on the underlying operating system. CISA lists it as actively exploited, and the tags note ransomware use.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Progress WS_FTP Server affected ? fixed ?
- vendor:progress ws ftp server affected < 8.7.4 fixed 8.7.4
- vendor:progress ws ftp server affected >= 8.8, < 8.8.2 fixed 8.8.2

## Fix

Apply the vendor mitigations per the Progress advisory; if none are available, discontinue use of the product (per CISA required action).

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-40044
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2023-40044

## From the sources

Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_