Skip to content
THREATWIRE

CVE Tracker · Vendor

Progress CVEs

9 CVEs in the tracker, 9 in the CISA KEV catalogue.

All vendors · RSS feed for Progress · Tracker data last updated 18 Oct 2026.

Showing 9 of 9

  1. CVE-2026-8037CVSS 9.8 criticalEPSS 77.4%KEV2026-06-04

    LoadMaster. Progress LoadMaster Command Injection Vulnerability

  2. CVE-2024-4885CVSS 9.8 criticalEPSS 99.3%KEV2024-06-25

    WhatsUp Gold. Progress WhatsUp Gold Path Traversal Vulnerability

  3. CVE-2023-34362CVSS 9.8 criticalEPSS 100%KEV2023-06-02

    MOVEit Transfer. Progress MOVEit Transfer SQL Injection Vulnerability

  4. CVE-2019-18935CVSS 9.8 criticalEPSS 100%KEV2019-12-11

    Telerik UI for ASP.NET AJAX. Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

  5. CVE-2024-6670No CVSSEPSS 93.0%KEV

    WhatsUp Gold. Progress WhatsUp Gold SQL Injection Vulnerability

  6. CVE-2024-4358No CVSSEPSS 97.5%KEV

    Telerik Report Server. Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

  7. CVE-2024-1212No CVSSEPSS 95.4%KEV

    Kemp LoadMaster. Progress Kemp LoadMaster OS Command Injection Vulnerability

  8. CVE-2023-40044No CVSSEPSS 90.4%KEV

    WS_FTP Server. Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

  9. CVE-2017-9248No CVSSEPSS 75.1%KEV

    ASP.NET AJAX and Sitefinity. Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability