Skip to content

CVE record · 1 source

CVE-2026-90867

CVSS 8.1

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose…

Vendor: Progress Software
Product: WS_FTP Server
CVSS v3.1: 8.1 AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.004 (p35)
Weakness: CWE-284
Exposure class: File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

28

CVE NVD 2d ago

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose…

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts.

CVSS 8.1 CVE-2026-90867 Progress Software