Progress Software

Products

Exploited and recent CVEs

• CVE-2026-8037 Critical 9.6 Exploited OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF 99.8%
• CVE-2026-8037 Critical 9.6 Exploited OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF 99.8%
• CVE-2026-8037 Critical 9.6 Exploited OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF 99.8%
• CVE-2026-8037 Critical 9.6 Exploited OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF 99.8%
• CVE-2024-1212 Critical 10.0 Exploited LoadMaster Pre-Authenticated OS Command Injection 95.4%
• CVE-2026-90872 Medium 6.6 Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server 0.3%
• CVE-2026-90871 Medium 5.3 Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server 0.3%
• CVE-2026-90870 Medium 5.3 Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server 0.3%
• CVE-2026-90869 High 7.5 Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server 0.4%
• CVE-2026-90868 Critical 9.9 OS Command Injection in Progress WS_FTP Server 1.5%
• CVE-2026-90867 High 8.1 Improper Access Control of Web Admin Console in Progress WS_FTP Server 0.4%
• CVE-2026-90866 Critical 9.1 Virtual Folder Path Confinement Bypass in Progress WS_FTP Server 0.7%
• CVE-2026-90865 Critical 9.0 Command Injection via FTP Notification Variables in Progress WS_FTP Server 1.1%
• CVE-2026-90864 Critical 9.1 Host Administrator Path Containment Bypass in Progress WS_FTP Server 0.5%
• CVE-2026-90863 Critical 9.1 Privilege Escalation via Missing Authorization in WS_FTP Manager 0.7%
• CVE-2026-90862 Medium 4.3 Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server 0.2%
• CVE-2026-90861 Medium 6.6 Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server 0.3%
• CVE-2026-84296 Medium 6.8 SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server 0.3%
• CVE-2026-84295 Critical 10.0 Improper Authentication in Progress WS_FTP Server 0.6%
• CVE-2026-84294 High 7.7 Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server 0.4%
• CVE-2026-118037 High 7.5 Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing 0.3%
• CVE-2026-118036 High 7.5 Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering 0.4%
• CVE-2026-118035 High 7.5 Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing 0.3%
• CVE-2026-118040 High 7.5 Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing <0.1%
• CVE-2026-118039 High 7.5 XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing 0.3%
• CVE-2026-118038 High 7.1 Path Traversal in Telerik Document Processing Libraries AI Agent Tools 0.3%
• CVE-2026-108116 High 7.5 MDX and SOAP Injection in Kendo UI for jQuery 0.3%
• CVE-2026-106153 Medium 5.4 Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar 0.2%
• CVE-2026-106151 Medium 5.4 Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery 0.2%
• CVE-2026-106150 Medium 5.4 Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip 0.2%