PT-2026-132339

CVE-2026-90871

·

Published

2026-10-29

·

Updated

2026-10-29

Description by

CVSS 3.1
5.3
Medium
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Improper limitation of a pathname to a restricted directory in Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated attacker to affect files outside the intended directory.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
CWE-73: External Control of File Name or Path
Related identifiers
CVE-2026-90871
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com