{"id":"CVE-2026-90861","aliases":[],"cve":{"records":[{"id":"CVE-2026-90861","source":"ProgressSoftware","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-09-14T06:09:55.847Z","published":"2026-10-29T15:47:45.075Z","modified":"2026-10-30T17:18:25.273Z"}],"publishers":[{"name":"ProgressSoftware","role":"CNA","organizationId":"f9fea0b6-671e-4eea-8fde-31911902ae05","modified":"2026-10-29T15:47:45.075Z"},{"name":"CISA-ADP","role":"ADP","organizationId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","modified":"2026-10-30T17:18:25.273Z"}],"references":[{"url":"https://progress.lightning.force.com/lightning/r/Knowledge__kav/ka7Pb000001vl86IAA/view","tags":["vendor-advisory"],"source":"ProgressSoftware"}],"weaknesses":[{"id":"CWE-532","description":"CWE-532: Insertion of Sensitive Information into Log File","source":"ProgressSoftware"},{"id":"CWE-522","description":"CWE-522: Insufficiently Protected Credentials","source":"ProgressSoftware"}],"applicability":[],"prioritization":[{"source":"CISA-ADP","type":"SSVC","role":"CISA Coordinator","timestamp":"2026-10-30T03:56:37.996783Z","decisions":[{"name":"Exploitation","value":"none"},{"name":"Automatable","value":"no"},{"name":"Technical Impact","value":"total"}]}]},"title":"Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server","titleSource":"ProgressSoftware","descriptionSource":"ProgressSoftware","description":"Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password in clear text to another administrator, who could use it to gain broader administrative access to the server.","score":6.6,"severity":"medium","published":"2026-10-29T15:47:45.075Z","modified":"2026-10-30T17:18:25.273Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"Progress Software","name":"WS_FTP Server","platforms":["Windows"],"versions":[{"version":"0","status":"affected","lessThan":"2024.0.7","versionType":"custom"},{"version":"0","status":"affected","lessThan":"2025.0.4","versionType":"custom"}],"defaultStatus":"unaffected","cpes":[],"source":"ProgressSoftware","url":"https://www.cve.org/CVERecord?id=CVE-2026-90861"}],"remediation":[{"text":"Restrict access to administrative logs to trusted personnel. Avoid changing privileged account passwords through FTP until the fix is applied. Contact Progress Software Technical Support for guidance on available mitigations.","source":"ProgressSoftware","url":"https://www.cve.org/CVERecord?id=CVE-2026-90861"}],"references":["https://progress.lightning.force.com/lightning/r/Knowledge__kav/ka7Pb000001vl86IAA/view"],"sources":[{"name":"CVE","id":"CVE-2026-90861","modified":"2026-10-30T17:18:25.273Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-90861"}],"assessments":[{"source":"ProgressSoftware","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","score":6.6}],"sourceAffected":[],"observedAt":"2026-10-30T19:27:38.344Z","kev":{"status":"not-listed","checkedAt":"2026-10-31T10:50:31.656Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-10-29T16:15:32.564Z","attemptedAt":"2026-10-29T16:15:32.564Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-10-29T16:15:32.070Z","attemptedAt":"2026-10-29T16:15:32.070Z"},{"source":"EUVD","status":"available","checkedAt":"2026-10-29T16:15:31.853Z","attemptedAt":"2026-10-29T16:15:31.853Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-10-29T16:15:31.733Z","attemptedAt":"2026-10-29T16:15:31.733Z"}],"evidence":[{"source":"ENISA EUVD","id":"EUVD-2026-113018","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113018","modified":"Oct 29, 2026, 3:47:45 PM","score":6.6,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","checkedAt":"2026-10-29T16:15:31.853Z"}],"aiSummary":{"text":"Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows may expose a user's password to another administrator, potentially allowing privilege escalation. An attacker would need access to activity logs. The vulnerability is due to insufficient protection of credentials and sensitive information in log files.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-10-30T09:05:53.446Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-90861"}]}}