CVE-2026-90865

Progress Software WS_FTP Server on Windows is vulnerable to an OS command injection vulnerability in versions prior to 2024.0.7 and 2025.0.4 . The flaw exists in FTP Notification Variables , which could allow an attacker to execute arbitrary commands with elevated privileges under specific config...