Cevnitra
Cevnitra

Explore Cevnitra

Explore Cevnitra

Find the risk.
Focus the fix.

Bring your applications and infrastructure into focus.

Scan Now
Already have an account? Log in
All security reports
NVD security advisoryCritical

Critical advisory for Missing authorization in the administrat

CVE-2026-90863 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Missing authorization in the administratAffected product

Advisory overview

Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and complete compromise of the underlying server.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 202 | Security report | Cevnitra