PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
critical·Product Based Web Vulnerabilities·Updated Oct 23, 2025

WS_FTP Server - Insecure Deserialization

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsurl
CostFree
3.8k
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
7
Vulnerabilities Found
confirmed findings
References
🔴
CISA Known Exploited Vulnerability
This CVE is actively exploited in the wild. CISA mandates federal agencies to patch immediately.
CVECVE-2023-40044
10.0
CVSScritical
Exploitable remotely over the internet · no authentication required.

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

Attack Vector
Network
Privileges Req.
None
User Interaction
None
Affected
WS_FTP Serverby Progress Software Corporation
AFFECTED< 8.8.2SAFE ✓≥ 8.8.2
Updated Sep 9, 2026View on NVD →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

WS_FTP Server - Insecure Deserialization CVE-2023-40044 Scanner | S4E