All security reports
NVD security advisoryCritical

Critical advisory for A path traversal vulnerability in Progre

CVE-2026-90866 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

A path traversal vulnerability in ProgreAffected product

Advisory overview

A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on W | Security report | Cevnitra