NVD security advisoryHigh
High advisory for Improper access control in the Web Admin
CVE-2026-90867 · Reported 29 Oct 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
Improper access control in the Web AdminAffected product
Advisory overview
Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts.
