All security reports
NVD security advisoryHigh

High advisory for Improper access control in the Web Admin

CVE-2026-90867 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

Improper access control in the Web AdminAffected product

Advisory overview

Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 | Security report | Cevnitra