CVE-2026-90863

CVE

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

October 29, 2026

Last Seen

October 29, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Progress WS_FTP Server Disclosed71.3

On October 29, 2026, Progress Software disclosed two critical vulnerabilities in its WS_FTP Server: CVE-2026-84295 and CVE-2026-90868. CVE-2026-84295, rated CVSS 10.0, allows unauthenticated remote attackers to access sensitive information, including administrative credentials. CVE-2026-90868, rated...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical Vulnerabilities in Progress WS_FTP Server Disclosed

3h ago·4 sources

Related Articles (3)

Missing Authorization in Progress Software WS_FTP Server High & Critical Vulnerabilities / 6h Progress Software - Ws Ftp Server - CRITICAL - CVE-2026-90863. A missing authorization flaw in the administrative interface of Progress Software's WS_FTP Server allows a delegated Host Administrator to manipulate system settings beyond their intended permissions. This vulnerability can lead to arbitrary command execution, granting unauthorized users the ability to execute operations with elevated privil

securityvulnerability.io·1h ago

[critical] Progress WS_FTP Server: unauthenticated admin credential exposure (CVE-2026-84295, CVSS 10) and OS command injection, fixed in 2024.0.7 and 2025.0.4 pwn.watch: incident updates (Patch now) / 3h Progress Software published CVE records on Oct 29 2026 for a batch of WS_FTP Server vulnerabilities on Windows. The worst is CVE-2026-84295 (CVSS 10), improper authentication that could let an unauthenticated remote attacker access sensitive information including administrative credentials, fix

pwn.watch·3h ago

CVE-2026-90863 - Exploits & Severity

Related Entities

Zero-day Exploit Progress Software CVE-2026-90868 CVE-2026-84295 CVE-2026-90872 CVE-2026-84294 CVE-2026-84296 CVE-2026-90865 CVE-2026-90867 CWE-78 - OS Command Injection CWE-269 - Improper Privilege Management CWE-287 - Improper Authentication