Skip to content

CVE record · 1 source

CVE-2026-90863

CVSS 9.1

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could…

Vendor: Progress Software
Product: WS_FTP Server
CVSS v3.1: 9.1 AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.007 (p51)
Weakness: CWE-862, CWE-915
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

36

CVE NVD 2d ago

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could…

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially…

CVSS 9.1 CVE-2026-90863 Progress Software