Resource Exhaustion Vulnerability in Progress Software WS_FTP Server
CVE-2026-90870

5.3MEDIUM

Key Information:

Vendor: Progress Software
Status: Ws Ftp Server
Vendor: CVE Published:; 29 October 2026

🔔 Create Progress Software Vulnerability Alert

What is CVE-2026-90870?

The Ad Hoc Transfer component of Progress Software's WS_FTP Server has a vulnerability that allows for missing release of backend receiver sessions. This issue can potentially lead to server resource exhaustion, causing service degradation and impacting overall system performance. Addressing this vulnerability is essential to maintain robust server operations and prevent resource-related disruptions.

Affected Version(s)

WS_FTP Server Windows 0 < 2024.0.7

WS_FTP Server Windows 0 < 2025.0.4

References

https://progress.lightning.force.com/lightning/r/Knowledg...

vendor-advisory

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 29, 2026
Vulnerability Reserved
Sep 14, 2026

Credit

Niv Levy (restricted)

CVE-2026-90870 Data

JSON