CVE-2026-90872

Progress Software WS_FTP Server on Windows (versions prior to 2024.0.7 and 2025.0.4 ) is vulnerable to an improper neutralization of directives in dynamically evaluated code within the Manager web console . This flaw allows an authenticated Manager administrator to execute arbitrary commands with...