Kritik CVSS 9.1
CVE-2026-90863: CVE-2026-90863: eksik yetkilendirme
Açıklama (NVD)
Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to exceed their authorized scope, potentially enabling arbitrary command execution with elevated privileges and complete compromise of the underlying server.
Özet bilgiler
- CVSS v3.1
- 9.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- %0,66 (yüzdelik 52)
- CWE
- CWE-862
- Yama
- Yok / bilinmiyor