CVE-2026-90862 | Progress WS_FTP Server up to 2024.0.6/2025.0.3 Web Transfer improper authentication

October 29, 2026 Yanac

A vulnerability identified as problematic has been detected in Progress WS_FTP Server up to 2024.0.6/2025.0.3. This affects an unknown part of the component Web Transfer Module. Performing a manipulation results in improper authentication.

This vulnerability is identified as CVE-2026-90862. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More