All security reports
NVD security advisoryHigh

High advisory for A remote attacker who knows a valid acco

CVE-2026-90869 · Reported 29 Oct 2026

Full advisory details, affected packages, severity context, and original source.

Affected technology

A remote attacker who knows a valid accoAffected product

Advisory overview

A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows.

Related references

Your vulnerabilities. One clear dashboard.

Find and review known vulnerabilities across your applications and infrastructure in one dashboard, so your team can see what needs attention and take action to fix it.

Create your account
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in | Security report | Cevnitra