PT-2026-132329
CVE-2026-90861
·
Published
2026-10-29
·
Updated
2026-10-29
Description by
CVSS 3.1
6.6
MediumMetricsAV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.
Found an issue in the description? Have something to add? Feel free to write us 👾