Skip to contentProgress Software vulnerabilities
Newest
- progress software telerik ui for asp.net ajaxRadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-186727.5 High
- progress ecs connection manager, loadmaster, progress software moveit waf +5 more +7 moreProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST APICVE-2026-596908.0 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to RootCVE-2026-596898.0 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore FunctionalityCVE-2026-596888.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management InterfaceCVE-2026-596878.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management InterfaceCVE-2026-596868.4 High
- progress telerik ui for asp.net ajaxUnauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChartCVE-2026-149326.5 Medium
- progress telerik ui for asp.net ajaxXXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAXCVE-2026-148655.3 Medium
- progress telerik ui for asp.net ajaxRadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131926.5 Medium
- progress telerik ui for asp.net ajaxPersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131908.1 High
- progress telerik ui for asp.net ajaxSpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131897.5 High
- progress telerik ui for asp.net ajaxDialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131885.9 Medium
- progress telerik ui for asp.net ajaxDialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131878.1 High
- progress telerik ui for asp.net ajaxAppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131868.1 High
- progress telerik ui for asp.net ajaxPersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131858.1 High
- progress telerik ui for asp.net ajaxRadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131847.5 High
- progress telerik ui for asp.net ajaxRadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131837.5 High
- progress telerik ui for asp.net ajaxRadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131827.5 High
- progress telerik ui for asp.net ajaxRadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-13181Public exploit8.1 High
- progress flowmonUnintended limited set of actions with elevated privileges may be performed during PDF generation in Progress FlowmonCVE-2026-80798.7 High
- progress software flowmon ads, progress flowmon anomaly detection system +1 morePossibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADSCVE-2026-92728.7 High
- progress ecs connection manager, loadmaster, progress software moveit waf +4 more +6 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-8037In KEVPublic exploitEPSS 99.8%9.6 Critical
- progress sitefinityCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityCVE-2026-73138.7 High
- progress sitefinityCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityCVE-2026-731210.0 Critical
- progress sitefinityCWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress SitefinityCVE-2026-72018.8 High
- progress sitefinityCWE-284: Improper Access Control in web services in Progress SitefinityCVE-2026-71989.8 Critical
- progress sitefinityCWE-20: Improper Input Validation in web services in Progress SitefinityCVE-2026-71958.8 High
- progress moveit automationAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationCVE-2026-84884.3 Medium
- progress moveit automationIncorrect default permissions vulnerability in Progress Software MOVEit AutomationCVE-2026-84876.5 Medium
- progress moveit automationAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationCVE-2026-84865.3 Medium
- progress moveit automationUncontrolled Memory Allocation vulnerability in Progress Software MOVEit AutomationCVE-2026-84855.9 Medium
- progress moveit automationImproper Access Control Vulnerability in Progress MOVEit AutomationCVE-2026-51747.7 High
- progress moveit automationImproper Authentication vulnerability in Progress MOVEit AutomationCVE-2026-46709.8 Critical
- progress telerik ui for asp.net ajaxDeserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-6023Public exploit8.1 High
- progress telerik ui for asp.net ajaxUncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-60227.5 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-40488.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-35198.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-3518EPSS 16.9%8.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-3517EPSS 15.5%8.4 High
- progress flowmonPossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web applicationCVE-2026-27378.5 High
- progress flowmonUnintended command execution during report generation in Progress FlowmonCVE-2026-36928.7 High
- progress software flowmon ads, progress flowmon anomaly detection system +1 morePossibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web applicationCVE-2026-25148.6 High
- progress software flowmon ads, progress flowmon anomaly detection system +1 morePossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web applicationCVE-2026-25138.6 High
- progress telerik ui for asp.net ajaxInsufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-28785.3 Medium
- progress software chef inspecUntrusted user data can lead to privilege escalationCVE-2025-67235.8 Medium
- progress loadmaster, connection manager for objectscale*, ecs connection manager +2 more +4 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterCVE-2025-13447EPSS 27.2%8.4 High
- progress loadmaster, connection manager for objectscale, ecs connection manager +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMasterCVE-2025-13444EPSS 27.2%8.4 High
- progress software flowmon ads, progress flowmon anomaly detection system +1 moreSQL injection leading to privilege escalation in Progress Flowmon ADSCVE-2025-137748.8 High
- progress software flowmonPrivilege escalation via writable configuration files in Progress FlowmonCVE-2025-119066.7 Medium
- progress software flowmonPossibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web applicationCVE-2025-102408.8 High
- Show moreLoading…