Skip to content

CVE record · 1 source

CVE-2026-90861

CVSS 6.6

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another…

Vendor: Progress Software
Product: WS_FTP Server
CVSS v3.1: 6.6 AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-522, CWE-532
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

21

CVE NVD 2d ago

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another…

Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.

CVSS 6.6 CVE-2026-90861 Progress Software