Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (16 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-90872 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 6.6 Medium
Improper neutralization of directives in dynamically evaluated code in the Manager web console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an authenticated Manager administrator to execute arbitrary commands with the privileges of the WS_FTP Server IIS worker process.
CVE-2026-90871 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 5.3 Medium
Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated attacker to affect files outside the intended directory.
CVE-2026-90870 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 5.3 Medium
A missing release of backend receiver sessions in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could lead to server resource exhaustion and service degradation.
CVE-2026-90869 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 7.5 High
A remote attacker who knows a valid account's enrolled SSH public key can terminate the shared SSH service in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows.
CVE-2026-90868 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.9 Critical
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution under certain configurations.
CVE-2026-90867 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 8.1 High
Improper access control in the Web Admin console of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could expose administrative functionality to remote authentication attempts.
CVE-2026-90866 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access locations outside their authorized scope, potentially enabling remote code execution.
CVE-2026-90865 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9 Critical
An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow arbitrary command execution with elevated privileges under certain configurations.
CVE-2026-90864 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope.
CVE-2026-90863 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 9.1 Critical
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and complete compromise of the underlying server.
CVE-2026-90862 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 4.3 Medium
Improper authentication in the Web Transfer Module of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements.
CVE-2026-90861 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 6.6 Medium
Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.
CVE-2026-84296 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 6.8 Medium
Multi-Factor Authentication Bypass vulnerability in SSH component in Progress Software WS_FTP Server versions prior to 2024.0.6, and 2025.0.3 on Windows allows authenticated users to bypass MFA requirements through improper association of authentication factors between accounts.
CVE-2026-84295 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-30 10 Critical
Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an unauthenticated remote attacker to access sensitive information, including administrative credentials.
CVE-2026-84294 2 Progress, Progress Software 2 Ws Ftp Server, Ws Ftp Server 2026-10-29 7.7 High
Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could allow an authenticated user to access files outside intended directories.
CVE-2024-9999 1 Progress Software 1 Ws Ftp Server 2026-04-15 6.5 Medium
In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.