All security reports
NVD security advisoryCritical

Critical advisory for An OS command injection vulnerability in

CVE-2026-90868 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

An OS command injection vulnerability inAffected product

Advisory overview

An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account