CVE-2026-90872
6.6 MEDIUMPublished 2026-10-29 · Updated 2026-10-30
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an authenticated Manager administrator to execute arbitrary commands with the privileges of the WS_FTP Server IIS worker process.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-94, CWE-95
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2024-42002PoC
- MEDIUMCVE-2026-101861PoC
- MEDIUMCVE-2026-105315PoC
- MEDIUMCVE-2026-111212PoC
- MEDIUMCVE-2026-111237PoC
- MEDIUMCVE-2026-111865PoC
- UNSCOREDCVE-2026-55094PoC
- UNSCOREDCVE-2026-69264PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.