CVE-2026-90871

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 29, 2026

Last Seen

October 29, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerabilities in Progress WS_FTP Server Disclosed72.0

On October 29, 2026, Progress Software disclosed two critical vulnerabilities in its WS_FTP Server: CVE-2026-84295 and CVE-2026-90868. CVE-2026-84295 is an improper authentication flaw with a CVSS score of 10.0, allowing unauthenticated remote attackers to access sensitive information, including adm...

Path Traversal Vulnerabilities Discovered in Software Products51.9

Two significant path traversal vulnerabilities have been disclosed recently. CVE-2026-43851, reported by Nozomi Networks, allows authenticated attackers to read arbitrary files on systems with a CVSS score of 8.2. This vulnerability requires high-privileged access and is not listed in CISA’s KEV cat...