PT-2026-132337

CVE-2026-90869

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
CWE-125: Out-of-bounds Read
Related identifiers
CVE-2026-90869
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com