CVE-2026-90865 | Progress WS_FTP Server up to 2024.0.6/2025.0.3 os command injection

October 29, 2026 Yanac

A vulnerability classified as very critical has been found in Progress WS_FTP Server up to 2024.0.6/2025.0.3. This vulnerability affects unknown code. The manipulation leads to os command injection.

This vulnerability is documented as CVE-2026-90865. The attack can be initiated remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More