CVE-2026-90867 | Progress WS_FTP Server up to 2024.0.6/2025.0.3 Web Admin Console access control

October 29, 2026 Yanac

A vulnerability was found in Progress WS_FTP Server up to 2024.0.6/2025.0.3 and classified as very critical. This affects an unknown part of the component Web Admin Console. The manipulation results in improper access controls.

This vulnerability was named CVE-2026-90867. The attack may be performed from remote. There is no available exploit.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More