Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2023-40044

In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

CVSS 10.0 · CriticalBuzz score 61.0KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 61.0

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 23.0 · diversity 13.0 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
23.0
9 evidence mentions in the snapshot
Diversity score
13.0
4 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
9 source links · newest first
  • CISA Now Flagging Vulnerabilities, Misconfigurations Exploited by RansomwareSecurityWeek

    CISA is now flagging vulnerabilities and misconfigurations that are known to be exploited in ransomware attacks.

    newswww.securityweek.comOct 13, 2023, 1:39 PM
  • Security Affairs newsletter Round 440 by Pierluigi Paganini – International editionSecurity Affairs

    A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. QakBot threat actors are still operational after the August takedown Ransomware attack on MGM Resorts costs […]

    newssecurityaffairs.comOct 8, 2023, 12:23 PM
  • Week in review: Patch Tuesday forecast, 9 free ransomware guides, Cybertech Europe 2023Help Net Security

    Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Photos: Cybertech Europe 2023 The Cybertech Europe conference and exhibition takes place at La Nuvola Convention Center in Rome, and features the latest innovative solutions from dozens of companies and speakers, including senior government officials, C-level executives, and industry trailblazers from Europe and around the world. Cybertech Europe 2023 video walkthrough In this Help Net Security video, we take you … More →

    newswww.helpnetsecurity.comOct 8, 2023, 8:30 AM
  • WS_FTP flaw CVE-2023-40044 actively exploited in the wildSecurity Affairs

    Experts warn of threat actors actively exploiting CVE-2023-40044 flaw in recently disclosed flaw in Progress Software’s WS_FTP products. Progress Software recently warned customers to address a critical severity vulnerability, tracked as CVE-2023-40044 (CVSS score 10), in its WS_FTP Server software which is used by thousands of IT teams worldwide. The vulnerability was discovered by researchers at the […]

    newssecurityaffairs.comOct 2, 2023, 6:48 PM
  • Live Exploitation Underscores Urgency to Patch Critical WS-FTP Server FlawSecurityWeek

    Rapid7 says attackers are targeting a critical pre-authentication flaw in Progress Software’s WS_FTP server just days after disclosure.

    newswww.securityweek.comOct 2, 2023, 4:21 PM
  • 2nd October – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 2nd October, please download our Threat_Intelligence Bulletin. TOP ATTACKS AND BREACHES Check Point researchers have detected a phishing campaign exploiting popular file-sharing program Dropbox. The threat actors use legitimate Dropbox pages to send official email messages to the victims, which will then redirect the […]

    vendorresearch.checkpoint.comOct 2, 2023, 1:20 PM
  • Critical vulnerability in WS_FTP Server exploited by attackers (CVE-2023-40044)Help Net Security

    Progress Software, the company behind the recently hacked MOVEit file-sharing tool, has recently fixed two critical vulnerabilities (CVE-2023-40044, CVE-2023-42657) in WS_FTP Server, another popular secure file transfer solution. Proof-of-concept code for CVE-2023-40044 has been available since Friday, and Rapid7 researchers have observed multiple instances of WS_FTP exploitation in the wild, with two different attack chains. The exploited vulnerability (CVE-2023-40044) and the update CVE-2023-40044 is a .NET deserialization vulnerability that could allow an unauthenticated threat actor … More →

    newswww.helpnetsecurity.comOct 2, 2023, 11:07 AM
  • Progress Software fixed two critical severity flaws in WS_FTP ServerSecurity Affairs

    Progress Software has addressed a critical severity vulnerability in its WS_FTP Server software used by thousands of IT teams worldwide. Progress Software warned customers to address a critical severity vulnerability, tracked as CVE-2023-40044 (CVSS score 10), in its WS_FTP Server software which is used by thousands of IT teams worldwide. “The WS_FTP team recently discovered […]

    newssecurityaffairs.comSep 30, 2023, 2:15 PM
  • Progress Software Patches Critical Pre-Auth Flaws in WS_FTP Server ProductSecurityWeek

    Progress Software ships patches for critical-severity flaws in its WS_FTP file transfer software and warns that a pre-authenticated attacker could wreak havoc on the underlying operating system.

    newswww.securityweek.comSep 28, 2023, 6:38 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence
  • CVE-2026-65883

    Joomla Extension - aimy-extensions.com - RCE via PHP object injection in Aimy Captcha-Less Form Guard 18.0 - 20.0 - A forged clfgd field allows PHP objection injection and thereby…

    CVSS 10.0 · Critical
    1 mention
  • CVE-2026-58163

    Apache Traffic Server mishandles on-disk cache fields and object lifetimes, corrupting state or crashing. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from…

    CVSS 8.3 · High
    1 mention
  • CVE-2026-14974

    IBM WebSphere Application Server 8.5, and 9.0 traditional could allow a remote attacker to execute arbitrary code caused by unsafe deserialization of untrusted data.

    CVSS 8.1 · High
    1 mention
  • CVE-2026-14512

    IBM WebSphere Application Server 9.0, and 8.5 traditional is vulnerable to pre-authentication unsafe deserialization which could allow a remote attacker to bypass authentication o…

    CVSS 9.8 · Critical
    1 mention
  • CVE-2026-66713

    Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component  in Apache Software Foundation Apache Axis2/Java through 2.0.0 on Apache Tomcat  (only whe…

    CVSS 9.8 · Critical
    3 mentions
  • CVE-2026-11756

    A Deserialization of Untrusted Data vulnerability affecting Station Launcher App in 3DEXPERIENCE platform from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R2026x coul…

    CVSS 10.0 · Critical
    1 mention