Medium severity6.6NVD Advisory· Published Oct 29, 2026· Updated Oct 29, 2026
CVE-2026-90861
CVE-2026-90861
Description
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.