Progress Software Corporation vulnerabilities

Products

• Whatsup Gold 42
• Marklogic Server 41
• Ws Ftp Server 27
• Sitefinity 13
• Telerik Report Server 12
• Telerik Reporting 10
• Openedge 9
• Moveit Transfer 6
• Loadmaster 2

Newest

• progress software ws ftp server Insecure Storage of Web Transfer Credentials in Progress WS_FTP Server CVE-2026-115340 7.1 HighNovember 9, 2026
• progress software ws ftp server Unauthenticated XFT Memory Exhaustion in Progress WS_FTP Server CVE-2026-115339 7.5 HighNovember 9, 2026
• progress software ws ftp server Unauthorized File Disclosure via Path Traversal in Thin Client Web Transfer in Progress WS_FTP Server CVE-2026-115341 7.7 HighNovember 9, 2026
• progress software ws ftp server Folder Permission Bypass in Progress WS_FTP Server CVE-2026-115337 6.3 MediumNovember 9, 2026
• progress software ws ftp server FTP Quota Accounting Bypass in Progress WS_FTP Server CVE-2026-115336 6.5 MediumNovember 9, 2026
• progress software ws ftp server Insecure XFT Transport in Progress WS_FTP Server CVE-2026-115338 8.1 HighNovember 9, 2026
• progress software ws ftp server Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server CVE-2026-90872 6.6 MediumOctober 29, 2026
• progress software ws ftp server Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server CVE-2026-90871 5.3 MediumOctober 29, 2026
• progress software ws ftp server Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server CVE-2026-90870 5.3 MediumOctober 29, 2026
• progress software ws ftp server Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server CVE-2026-90869 7.5 HighOctober 29, 2026
• progress software ws ftp server OS Command Injection in Progress WS_FTP Server CVE-2026-90868 9.9 CriticalOctober 29, 2026
• progress software ws ftp server Improper Access Control of Web Admin Console in Progress WS_FTP Server CVE-2026-90867 8.1 HighOctober 29, 2026
• progress software ws ftp server Virtual Folder Path Confinement Bypass in Progress WS_FTP Server CVE-2026-90866 9.1 CriticalOctober 29, 2026
• progress software ws ftp server Command Injection via FTP Notification Variables in Progress WS_FTP Server CVE-2026-90865 9.0 CriticalOctober 29, 2026
• progress software ws ftp server Host Administrator Path Containment Bypass in Progress WS_FTP Server CVE-2026-90864 9.1 CriticalOctober 29, 2026
• progress software ws ftp server Privilege Escalation via Missing Authorization in WS_FTP Manager CVE-2026-90863 9.1 CriticalOctober 29, 2026
• progress software ws ftp server Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server CVE-2026-90862 4.3 MediumOctober 29, 2026
• progress software ws ftp server Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server CVE-2026-90861 6.6 MediumOctober 29, 2026
• progress software ws ftp server SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server CVE-2026-84296 6.8 MediumOctober 29, 2026
• progress software ws ftp server Improper Authentication in Progress WS_FTP Server CVE-2026-84295 Public exploit 10.0 CriticalOctober 29, 2026
• progress software ws ftp server Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server CVE-2026-84294 7.7 HighOctober 29, 2026
• progress software corporation marklogic server HTTP response splitting in Progress MarkLogic Server Query Console CVE-2026-85976 5.4 MediumOctober 12, 2026
• progress software corporation marklogic server Cleartext transmission in Progress MarkLogic Server Amazon S3 connections CVE-2026-85975 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Improper TLS hostname verification in Progress MarkLogic Server CVE-2026-85974 7.4 HighOctober 12, 2026
• progress software corporation marklogic server Cleartext transmission in Progress MarkLogic Server cluster join operations CVE-2026-85973 7.4 HighOctober 12, 2026
• progress software corporation marklogic server Improper Kerberos server verification in Progress MarkLogic Server CVE-2026-85972 7.4 HighOctober 12, 2026
• progress software corporation marklogic server Incorrect log file permissions in Progress MarkLogic Server CVE-2026-85971 7.1 HighOctober 12, 2026
• progress software corporation marklogic server Improper XML external entity restriction in Progress MarkLogic Server CVE-2026-85970 7.1 HighOctober 12, 2026
• progress software corporation marklogic server Out-of-bounds write in Progress MarkLogic Server CVE-2026-85969 7.1 HighOctober 12, 2026
• progress software corporation marklogic server Out-of-bounds read in Progress MarkLogic Server CVE-2026-85968 7.1 HighOctober 12, 2026
• progress software corporation marklogic server Cross-site scripting in Progress MarkLogic Server CVE-2026-85967 6.1 MediumOctober 12, 2026
• progress software corporation marklogic server Exposure of sensitive information in Progress MarkLogic Server CVE-2026-85966 7.7 HighOctober 12, 2026
• progress software corporation marklogic server Use-after-free in Progress MarkLogic Server JavaScript engine integration CVE-2026-85965 8.0 HighOctober 12, 2026
• progress software corporation marklogic server Path traversal in Progress MarkLogic Server Query Console CVE-2026-85964 7.7 HighOctober 12, 2026
• progress software corporation marklogic server Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector CVE-2026-85963 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Improper authentication in Progress MarkLogic Server SAML processing CVE-2026-85962 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Sensitive information exposure in Progress MarkLogic Server Azure deployments CVE-2026-85961 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Cross-site request forgery in Progress MarkLogic Server Query Console CVE-2026-85960 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Insufficient authentication logging in Progress MarkLogic Server CVE-2026-85959 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Improper OAuth token validation in Progress MarkLogic Server CVE-2026-85958 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Improper XML external entity restriction in Progress MarkLogic Server SAML processing CVE-2026-85957 7.5 HighOctober 12, 2026
• progress software corporation marklogic server Improper privilege management in Progress MarkLogic Server backup and restore operations CVE-2026-85956 9.6 CriticalOctober 12, 2026
• progress software corporation marklogic server Improper privilege management in Progress MarkLogic Server xdmp:eval-in CVE-2026-85955 9.9 CriticalOctober 12, 2026
• progress software corporation marklogic server Improper privilege management in Progress MarkLogic Server higher-order XQuery functions CVE-2026-85954 8.6 HighOctober 12, 2026
• progress software corporation marklogic server Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio CVE-2026-85953 8.5 HighOctober 12, 2026
• progress software corporation marklogic server Server-side request forgery in Progress MarkLogic Server Linux cloud deployments CVE-2026-85952 8.5 HighOctober 12, 2026
• progress software corporation marklogic server Server-side request forgery in Progress MarkLogic Server Azure deployments CVE-2026-85951 8.5 HighOctober 12, 2026
• progress software corporation marklogic server Improper privilege management in Progress MarkLogic Server REST extensions CVE-2026-85950 8.4 HighOctober 12, 2026
• progress software corporation marklogic server Sensitive information exposure in Progress MarkLogic Server trace logs CVE-2026-85949 8.1 HighOctober 12, 2026
• progress software corporation marklogic server Improper privilege management in Progress MarkLogic Server Management API CVE-2026-85948 9.9 CriticalOctober 12, 2026
• Show olderLoading…