{"metadata": {"vulnerability": "CVE-2026-84295", "count": 23, "kinds": {"milestone": 4, "sighting": 11, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-01T16:14:46.568Z", "date_only": false, "value": "2026-09-01T16:14:46.568Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-84295", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-29T15:45:08.601Z", "date_only": false, "value": "2026-10-29T15:45:08.601Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84295", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-10-29T15:45:08.601Z", "date_only": false, "value": "2026-10-29T15:45:08.601Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / ProgressSoftware", "record": "CVE-2026-84295", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-29T16:19:29Z", "date_only": false, "value": "2026-10-29T16:19:29Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-QWPP-FGGF-7H3C", "record": "GHSA-QWPP-FGGF-7H3C", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-10-29T16:19:29.860Z", "date_only": false, "value": "2026-10-29T16:19:29.860", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84295", "record": "FKIE_CVE-2026-84295", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T16:31:46.168Z", "date_only": false, "value": "2026-10-29T16:31:46.168929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3myzovl3n74iv", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "eec00b33-c2ba-4131-961c-443049783c3f", "content": "CVE Radar | CVE-2026-84295 | CVSS 10.0\n\nCritical WS_FTP Server Authentication Flaw\n\nCVE-2026-84295 is rated Critical with a CVSS 3.1 score of 10.0.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1342", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3myzovl3n74iv"}, {"timestamp": "2026-10-29T17:13:01.777Z", "date_only": false, "value": "2026-10-29T17:13:01.777034Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117525314353734915", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "f8e01a58-561a-402f-8957-4e76684456a3", "content": "CVE-2026-84295 Improper Authentication in Progress WS_FTP Server Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.\nhttps://www.cve.org/CVERecord?id=CVE-2026-84295https://progress.lightning.force.com/lightning/r/Knowledge__kav/ka7Pb000001vl86IAA/view#ProgressSoftware #WS_FTPServer#CVE_2026_84295#bot", "url": "https://infosec.exchange/users/cve/statuses/117525314353734915"}, {"timestamp": "2026-10-29T18:12:49.035Z", "date_only": false, "value": "2026-10-29T18:12:49.035400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3myzukcose42p", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "e47c9adf-bf8b-459f-96b5-253d5f667edd", "content": "\ud83d\udea8 CVE-2026-84295 \u2014 CVSS 10 CRITICAL\n\nImproper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windo...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84295\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3myzukcose42p"}, {"timestamp": "2026-10-29T18:31:06Z", "date_only": false, "value": "2026-10-29T18:31:06Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-QWPP-FGGF-7H3C", "record": "GHSA-QWPP-FGGF-7H3C", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-10-29T18:31:06Z", "date_only": false, "value": "2026-10-29T18:31:06Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-QWPP-FGGF-7H3C", "record": "GHSA-QWPP-FGGF-7H3C", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-29T19:20:04.249Z", "date_only": false, "value": "2026-10-29T19:20:04.249051Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3myzyckrwp32p", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "0f5c9870-b05e-408b-88d1-0ce694afc1be", "content": "CVE-2026-84295\nVersions of Progress Software WS_FTP Server released before 2024.0.6 (and the early 2025.0.3 builds) on Windows do not properly verify who is connecting. This can let an outsider without any login reach\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3myzyckrwp32p"}, {"timestamp": "2026-10-30T03:37:18.864Z", "date_only": false, "value": "2026-10-30T03:37:18.864789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mz2u3ovvws22", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "a70a5e03-9240-484c-b378-8e8501b99338", "content": "Patch 15 WS_FTP Server vulnerabilities now, including 10.0 CVSS flaw CVE-2026-84295 and 9.9 CVSS command injection bug CVE-2026-90868.\n\n#WSFTPServer #ProgressSoftware #CVE202684295 #Cybersecurity #Vulnerability #InfoSec", "url": "https://bsky.app/profile/securityonline.bsky.social/post/3mz2u3ovvws22"}, {"timestamp": "2026-10-30T03:56:36.511Z", "date_only": false, "value": "2026-10-30T03:56:36.511377Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84295", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-30T03:56:36.511Z", "date_only": false, "value": "2026-10-30T03:56:36.511377Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84295", "record": "FKIE_CVE-2026-84295", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-30T16:28:21.950Z", "date_only": false, "value": "2026-10-30T16:28:21.950252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/censys.bsky.social/post/3mz476fpbr22v", "record": "cve-2026-84295", "field": "creation_timestamp", "uuid": "0e23f3aa-8b86-4399-b161-87ed0d504141", "content": "\ud83d\udea8 Rapid Response: 7 vulnerabilities in Progress WS_FTP Server (CVE-2026-84295, CVSS 10.0), could expose administrative credentials and allow further server compromise.\n\nCensys ARC identified ~2,500 Internet-exposed WS_FTP Server hosts: https://censys.com/advisory/cve-2026-84295-and-others/", "url": "https://bsky.app/profile/censys.bsky.social/post/3mz476fpbr22v"}, {"timestamp": "2026-10-30T17:18:25.542Z", "date_only": false, "value": "2026-10-30T17:18:25.542Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-84295", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-30T17:18:25.542Z", "date_only": false, "value": "2026-10-30T17:18:25.542Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-84295", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-30T18:18:13.827Z", "date_only": false, "value": "2026-10-30T18:18:13.827", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-84295", "record": "FKIE_CVE-2026-84295", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-31T07:55:06.714Z", "date_only": false, "value": "2026-10-31T07:55:06.714725Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3mz5sxltio323", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "91e2da88-175e-4c7f-add5-077c752a4b6e", "content": "Vuln\u00e9rabilit\u00e9s critiques (CVSS \u2265 9) \u00b7 3\n\u2022 Progress WS FTP Server (CVE-2026-84295), CVSS 10.0 (Cyberveille)\n\u2022 Veeam Virtualization Extensions (CVE-2023-22793), CVSS 9.3 (Cyberveille)\n\u2022 Sophos UTM (Proxy de messagerie) (CVE-2026-118633), CVSS 9.2 (Cyberveille)", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3mz5sxltio323"}, {"timestamp": "2026-11-01T15:00:08Z", "date_only": false, "value": "2026-11-01T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fcgerDYv_wZITRVm_L0fdOxcHIp1qmquIumvZeCPzwNcHxc", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "48680a80-73d7-49a0-a33d-b0e16d261eec", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-11-01T15:00:08Z", "date_only": false, "value": "2026-11-01T15:00:08.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fcgerDYv_wZITRVm_L0fdOxcHIp1qmquIumvZeCPzwNcHxc", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "664af419-86a0-44ab-88f5-2e04d76aba90"}, {"timestamp": "2026-11-02T02:38:15.994Z", "date_only": false, "value": "2026-11-02T02:38:15.994405Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mzcc6uvqp42f", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "7a693687-8e68-4465-a027-ee65d7fcc42b", "content": "Progress Patches 10.0 CVSS WS_FTP\u30b5\u30fc\u30d0\u30fc\u306e\u8106\u5f31\u6027 CVE-2026-84295 \u304a\u3088\u3073\u305d\u306e\u4ed6\u306e14\u306e\u30d0\u30b0 #SecurityOnline (Oct 30)\n\nsecurityonline.info/ws-ftp-serve...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3mzcc6uvqp42f"}, {"timestamp": "2026-11-02T07:07:32.735Z", "date_only": false, "value": "2026-11-02T07:07:32.735254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/unnchain.bsky.social/post/3mzcraexqpe2t", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "e1bbbb8d-fe4b-4320-b3d8-af6edeb7a762", "content": "Progress\u306e\u30d5\u30a1\u30a4\u30eb\u8ee2\u9001\u30b5\u30fc\u30d0\u30fc\u300cWS_FTP Server\u300d\uff08Windows\u7248\uff09\u306b\u3001CVSS 10.0\u306e\u8a8d\u8a3c\u306e\u4e0d\u5099\uff08CVE-2026-84295\uff09\u3002\u30ed\u30b0\u30a4\u30f3\u306a\u3057\u3067\u3001\u7ba1\u7406\u8005\u306e\u8a8d\u8a3c\u60c5\u5831\u3092\u542b\u3080\u6a5f\u5bc6\u60c5\u5831\u3092\u8aad\u307e\u308c\u308b\u304a\u305d\u308c\u304c\u3042\u308a\u307e\u3059\u3002\u3053\u306e\u4ef6\u306f2024.0.6\uff0f2025.0.3\u672a\u6e80\u304c\u5bfe\u8c61\u3067\u3059\u304c\u3001\u540c\u6642\u306b\u516c\u8868\u3055\u308c\u305f\u30b3\u30de\u30f3\u30c9\u5b9f\u884c\u306a\u3069\u306e\u8106\u5f31\u6027\u306f2024.0.7\uff0f2025.0.4\u3067\u4fee\u6b63\u3002\u307e\u3068\u3081\u3066\u6700\u65b0\u7248\u3078\u3002\u5916\u90e8\u516c\u958b\u3057\u3066\u3044\u305f\u306a\u3089\u3001\u66f4\u65b0\u5f8c\u306b\u7ba1\u7406\u8005\u306e\u8cc7\u683c\u60c5\u5831\u3082\u5909\u3048\u3066\u304a\u304f\u3068\u5b89\u5fc3\u3067\u3059\u3002\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-84295", "url": "https://bsky.app/profile/unnchain.bsky.social/post/3mzcraexqpe2t"}], "metrics": {"as_of": "2026-11-05T01:20:43.304Z", "anchors": {"origin": {"timestamp": "2026-10-29T15:45:08.601Z", "date_only": false, "value": "2026-10-29T15:45:08.601Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84295", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-10-29T15:45:08.601Z", "date_only": false, "value": "2026-10-29T15:45:08.601Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84295", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-11-01T15:00:08Z", "date_only": false, "value": "2026-11-01T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fcgerDYv_wZITRVm_L0fdOxcHIp1qmquIumvZeCPzwNcHxc", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "48680a80-73d7-49a0-a33d-b0e16d261eec", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 256499.399, "hours": 71.24983305555556, "days": 2.9687430439814815, "min_seconds": 256499.399, "max_seconds": 256499.399, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-29T15:45:08.601Z", "date_only": false, "value": "2026-10-29T15:45:08.601Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84295", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-01T15:00:08Z", "date_only": false, "value": "2026-11-01T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fcgerDYv_wZITRVm_L0fdOxcHIp1qmquIumvZeCPzwNcHxc", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "48680a80-73d7-49a0-a33d-b0e16d261eec", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 552934.703686, "hours": 153.59297324611111, "days": 6.399707218587962, "min_seconds": 552934.703686, "max_seconds": 552934.703686, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-10-29T15:45:08.601Z", "date_only": false, "value": "2026-10-29T15:45:08.601Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-84295", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-05T01:20:43.304Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 296435.304686, "hours": 82.34314019055556, "days": 3.430964174606481, "min_seconds": 296435.304686, "max_seconds": 296435.304686, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-01T15:00:08Z", "date_only": false, "value": "2026-11-01T15:00:08.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fcgerDYv_wZITRVm_L0fdOxcHIp1qmquIumvZeCPzwNcHxc", "record": "CVE-2026-84295", "field": "creation_timestamp", "uuid": "48680a80-73d7-49a0-a33d-b0e16d261eec", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-05T01:20:43.304Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}