CVE-2026-90872
MEDIUM
NVD
CVSS Score
6.6
Severity
MEDIUM
Published
Oct 29, 2026
Vendor
unknown
Description
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an authenticated Manager administrator to execute arbitrary commands with the privileges of the WS_FTP Server IIS worker process.