Progress Software has fixed a critical pre-authentication remote code execution bug in its WS_FTP Server product.