Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2023-40044

CVSS 10.0 Actively exploited (KEV) 1 detection found
View on NVD →
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

Detection rules

Source Rule Status Updated
splunk WS FTP Remote Code Execution production 2026-05-13