Skip to content

CVE record · 1 source

CVE-2026-90872

CVSS 6.6

Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to…

Vendor: Progress Software
Product: WS_FTP Server
CVSS v3.1: 6.6 AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Weakness: CWE-94, CWE-95
Exposure class: Web platform, File transfer

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

27

CVE NVD 2d ago

Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to…

Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an authenticated Manager…

CVSS 6.6 CVE-2026-90872 Progress Software