Progress Software vulnerabilities

Products

• Loadmaster 26
• Telerik Ui For Asp.net Ajax 19
• Kendo Ui For Jquery 15
• Ws Ftp Server 15
• Moveit Waf 10
• Object Scale Connection Manager 10
• Telerik Document Processing Libraries 9
• Flowmon 7
• Moveit Automation 7
• Ecs Connection Manager 5
• Ecs Connections Manager 5
• Sitefinity 5
• Telerik Reporting 5
• Telerik Report Server 5
• Telerik Ui For Wpf 5
• Chef Automate 4
• Flowmon Ads 4
• Progress® Telerik® Fiddler® Classic 4
• Telerik Ui For Winforms 3
• Chef Inspec 2
• Hybrid Data Pipeline 2
• Kendoreact 2
• Progress® Telerik® Fiddler® Everywhere 2

Newest

• progress software ws ftp server Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server CVE-2026-90872 6.6 MediumOctober 29, 2026
• progress software ws ftp server Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server CVE-2026-90871 5.3 MediumOctober 29, 2026
• progress software ws ftp server Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server CVE-2026-90870 5.3 MediumOctober 29, 2026
• progress software ws ftp server Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server CVE-2026-90869 7.5 HighOctober 29, 2026
• progress software ws ftp server OS Command Injection in Progress WS_FTP Server CVE-2026-90868 9.9 CriticalOctober 29, 2026
• progress software ws ftp server Improper Access Control of Web Admin Console in Progress WS_FTP Server CVE-2026-90867 8.1 HighOctober 29, 2026
• progress software ws ftp server Virtual Folder Path Confinement Bypass in Progress WS_FTP Server CVE-2026-90866 9.1 CriticalOctober 29, 2026
• progress software ws ftp server Command Injection via FTP Notification Variables in Progress WS_FTP Server CVE-2026-90865 9.0 CriticalOctober 29, 2026
• progress software ws ftp server Host Administrator Path Containment Bypass in Progress WS_FTP Server CVE-2026-90864 9.1 CriticalOctober 29, 2026
• progress software ws ftp server Privilege Escalation via Missing Authorization in WS_FTP Manager CVE-2026-90863 9.1 CriticalOctober 29, 2026
• progress software ws ftp server Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server CVE-2026-90862 4.3 MediumOctober 29, 2026
• progress software ws ftp server Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server CVE-2026-90861 6.6 MediumOctober 29, 2026
• progress software ws ftp server SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server CVE-2026-84296 6.8 MediumOctober 29, 2026
• progress software ws ftp server Improper Authentication in Progress WS_FTP Server CVE-2026-84295 Public exploit 10.0 CriticalOctober 29, 2026
• progress software ws ftp server Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server CVE-2026-84294 7.7 HighOctober 29, 2026
• progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing CVE-2026-118037 7.5 HighOctober 28, 2026
• progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering CVE-2026-118036 7.5 HighOctober 28, 2026
• progress software telerik document processing libraries Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing CVE-2026-118035 7.5 HighOctober 28, 2026
• progress software telerik document processing libraries Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing CVE-2026-118040 7.5 HighOctober 28, 2026
• progress software telerik document processing libraries XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing CVE-2026-118039 7.5 HighOctober 28, 2026
• progress software telerik document processing libraries Path Traversal in Telerik Document Processing Libraries AI Agent Tools CVE-2026-118038 7.1 HighOctober 28, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more MDX and SOAP Injection in Kendo UI for jQuery CVE-2026-108116 7.5 HighOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar CVE-2026-106153 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery CVE-2026-106151 5.4 MediumOctober 15, 2026
• progress software kendo ui for jquery Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip CVE-2026-106150 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-site Scripting (XSS) in Kendo UI for jQuery Menu CVE-2026-106149 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery CVE-2026-106148 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery CVE-2026-106147 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery CVE-2026-106161 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery CVE-2026-106160 5.4 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery CVE-2026-106159 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery CVE-2026-106158 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery CVE-2026-106157 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery CVE-2026-106162 4.7 MediumOctober 15, 2026
• progress kendo ui, progress software kendo ui for jquery +1 more Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser CVE-2026-106163 6.5 MediumOctober 15, 2026
• progress software kendo ui for vue Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue CVE-2026-106139 5.4 MediumOctober 10, 2026
• progress software kendoreact Cross-Site Scripting via Chart Tooltip in KendoReact CVE-2026-106138 5.4 MediumOctober 10, 2026
• progress software telerik report server Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers CVE-2026-106155 8.9 HighOctober 9, 2026
• progress software telerik report server Privilege Escalation in Telerik Report Server Service-Agent Hub CVE-2026-106145 7.1 HighOctober 9, 2026
• progress software telerik document processing libraries Infinite Loop in Telerik Document Processing XLS Import CVE-2026-106164 7.3 HighOctober 7, 2026
• progress software autonomous rest connector genai agents OS command injection in Progress Software Autonomous REST Connector GenAI Agents CVE-2026-91140 9.6 CriticalOctober 6, 2026
• progress software @progress/sitefinity-nextjs-sdk CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK CVE-2026-92931 8.8 HighOctober 5, 2026
• progress software progress® telerik® fiddler® classic Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic CVE-2026-77805 7.9 HighOctober 5, 2026
• progress software progress® telerik® fiddler® classic Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic CVE-2026-77804 6.6 MediumOctober 5, 2026
• progress software progress® telerik® fiddler® classic Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® Classic CVE-2026-77803 3.6 LowOctober 5, 2026
• progress software progress® telerik® fiddler® classic HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® Classic CVE-2026-77802 6.3 MediumOctober 5, 2026
• progress software progress® telerik® fiddler® everywhere Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere CVE-2026-86158 7.7 HighSeptember 29, 2026
• progress software progress® telerik® fiddler® everywhere Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere CVE-2026-86157 5.6 MediumSeptember 29, 2026
• progress software chef automate Privilege Escalation in Progress Chef Automate CVE-2026-80462 10.0 CriticalSeptember 11, 2026
• progress software telerik ui for asp.net ajax DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX CVE-2026-19219 8.1 HighSeptember 2, 2026
• Show olderLoading…