Skip to contentProgress vulnerabilities
Products
Show 7 moreShow less
Newest
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreProgress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management InterfaceCVE-2026-596868.4 High
- progress moveit transferStored XSS vulnerability in MOVEit TransferCVE-2026-159687.1 High
- progress moveit transferMOVEit Transfer refresh-token processing does not enforce updated account restrictionsCVE-2026-159677.5 High
- progress moveit transferImproper CORS handling in MOVEit TransferCVE-2026-159667.5 High
- progress moveit transferMFA Bypass in MOVEit TransferCVE-2026-106977.5 High
- progress telerik ui for asp.net ajaxUnauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChartCVE-2026-149326.5 Medium
- progress telerik ui for asp.net ajaxXXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAXCVE-2026-148655.3 Medium
- progress telerik ui for asp.net ajaxRadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131926.5 Medium
- progress telerik ui for asp.net ajaxPersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131908.1 High
- progress telerik ui for asp.net ajaxSpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131897.5 High
- progress telerik ui for asp.net ajaxDialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131885.9 Medium
- progress telerik ui for asp.net ajaxDialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131878.1 High
- progress telerik ui for asp.net ajaxAppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131868.1 High
- progress telerik ui for asp.net ajaxPersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131858.1 High
- progress telerik ui for asp.net ajaxRadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131847.5 High
- progress telerik ui for asp.net ajaxRadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131837.5 High
- progress telerik ui for asp.net ajaxRadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-131827.5 High
- progress telerik ui for asp.net ajaxRadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-13181Public exploit8.1 High
- progress sharefile storage zones controllerPath traversal in Progress ShareFile Storage Zones Controller (SZC)CVE-2026-157248.7 High
- progress moveit transferFile Extension Restriction Bypass in MOVEit TransferCVE-2026-88013.5 Low
- progress moveit transferCross-Org External Token Metadata accessible to AuditUser roleCVE-2026-88002.7 Low
- progress moveit transferIPv6 Loopback Spoof via Trusted Host Header Bypasses Origin Check in MOVEit TransferCVE-2026-86513.7 Low
- progress moveit transferAuthenticated Path Traversal allows MOVEit admins to view arbitrary system filesCVE-2026-86504.5 Medium
- progress moveit transferInstitution scope bypass vulnerability in custom reportsCVE-2026-86496.4 Medium
- progress moveit transferStored XSS in MOVEit Transfer Ad Hoc moduleCVE-2026-119038.0 High
- progress moveit transferMemory leak in SFTP service can result in a denial of service in MOVEit TransferCVE-2026-106997.5 High
- progress moveit transferTable scope bypass vulnerability in custom reportsCVE-2026-106987.2 High
- progress flowmonUnintended limited set of actions with elevated privileges may be performed during PDF generation in Progress FlowmonCVE-2026-80798.7 High
- progress software flowmon ads, progress flowmon anomaly detection system +1 morePossibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADSCVE-2026-92728.7 High
- progress ecs connection manager, loadmaster, progress software moveit waf +4 more +6 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-8037In KEVPublic exploitEPSS 99.8%9.6 Critical
- progress sitefinityCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityCVE-2026-73138.7 High
- progress sitefinityCWE‑522: Insufficiently Protected Credentials in web services in Progress SitefinityCVE-2026-731210.0 Critical
- progress sitefinityCWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress SitefinityCVE-2026-72018.8 High
- progress sitefinityCWE-284: Improper Access Control in web services in Progress SitefinityCVE-2026-71989.8 Critical
- progress sitefinityCWE-20: Improper Input Validation in web services in Progress SitefinityCVE-2026-71958.8 High
- progress moveit automationAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationCVE-2026-84884.3 Medium
- progress moveit automationIncorrect default permissions vulnerability in Progress Software MOVEit AutomationCVE-2026-84876.5 Medium
- progress moveit automationAllocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationCVE-2026-84865.3 Medium
- progress moveit automationUncontrolled Memory Allocation vulnerability in Progress Software MOVEit AutomationCVE-2026-84855.9 Medium
- progress moveit automationImproper Access Control Vulnerability in Progress MOVEit AutomationCVE-2026-51747.7 High
- progress moveit automationImproper Authentication vulnerability in Progress MOVEit AutomationCVE-2026-46709.8 Critical
- progress telerik ui for asp.net ajaxDeserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-6023Public exploit8.1 High
- progress telerik ui for asp.net ajaxUncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-60227.5 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-40488.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-35198.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-3518EPSS 16.9%8.4 High
- progress ecs connection manager, loadmaster, progress software moveit waf +3 more +5 moreOS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVE-2026-3517EPSS 15.5%8.4 High
- progress flowmonPossibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web applicationCVE-2026-27378.5 High
- progress flowmonUnintended command execution during report generation in Progress FlowmonCVE-2026-36928.7 High
- progress sharefile storage zones controllerRCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)CVE-2026-2701EPSS 54.5%9.1 Critical
- Show moreLoading…