<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: progress-software-ws-ftp-server</title><description>Every new CVE for progress-software-ws-ftp-server.</description><link>https://agentprime.io/</link><item><title>CVE-2026-90872: Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90872/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90872/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:57:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90871: Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90871/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90871/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:56:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90870: Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90870/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90870/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:55:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90869: Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90869/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90869/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:54:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90868: OS Command Injection in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90868/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90868/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:53:59 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-90867: Improper Access Control of Web Admin Console in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90867/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90867/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:53:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90866: Virtual Folder Path Confinement Bypass in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90866/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90866/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:52:24 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-90865: Command Injection via FTP Notification Variables in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90865/</guid><description>CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:51:35 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-90864: Host Administrator Path Containment Bypass in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90864/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90864/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:50:29 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-90863: Privilege Escalation via Missing Authorization in WS_FTP Manager</title><link>https://agentprime.io/advisories/CVE-2026-90863/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90863/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:49:34 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-90862: Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90862/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90862/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:48:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90861: Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-90861/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90861/</guid><description>CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:47:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84296: SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-84296/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84296/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:46:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-84295: Improper Authentication in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-84295/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84295/</guid><description>CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:45:08 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-84294: Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server</title><link>https://agentprime.io/advisories/CVE-2026-84294/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-84294/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 29 Oct 2026 15:42:44 GMT</pubDate><category>CVE</category></item></channel></rss>