#ws-ftp

Analysis · May 20, 2026 · Colten Anderson

When the catalog says 'authenticated' and the researcher says it isn't

The KEV entry for CVE-2023-40044 calls it an authenticated attack. The researchers who found it demonstrated remote code execution with no login at all. When your authoritative sources disagree about whether a bug needs credentials, plan around the scarier answer.