PR
Vendor
Progress
384
CVEs
16
On KEV
28
New 30D
Products
MT9.8
MOVEit Transfer
File Transfer
49 CVEs1 on KEV12 new
KU7.5
Kendo UI
Progress
14 CVEs0 on KEV13 new
SS9.8
ShareFile Storage Zones Controller
Progress
9 CVEs0 on KEV3 new
WG9.8
WhatsUp Gold
IT Management
62 CVEs2 on KEV0 new
LO9.8
LoadMaster
Progress
27 CVEs2 on KEV0 new
TU9.8
Telerik UI for ASP.NET AJAX
Progress
22 CVEs2 on KEV0 new
WS9.6
WS_FTP Server
Progress
28 CVEs1 on KEV0 new
SI9.8
Sitefinity
Progress
24 CVEs1 on KEV0 new
CM9.8
Connection Manager For Objectscale*
Progress
12 CVEs1 on KEV0 new
EC9.8
Ecs Connection Manager
Progress
12 CVEs1 on KEV0 new
TR9.8
Telerik Report Server
Progress
8 CVEs1 on KEV0 new
MW9.8
Moveit Web Application Firewall
Progress
7 CVEs1 on KEV0 new
AA9.8
ASP.NET AJAX and Sitefinity
Progress
1 CVEs1 on KEV0 new
KL9.8
Kemp LoadMaster
Progress
1 CVEs1 on KEV0 new
MC9.8
Moveit Cloud
Progress
1 CVEs1 on KEV0 new
TR9.8
Telerik Reporting
Progress
14 CVEs0 on KEV0 new
OP9.9
OpenEdge
Progress
12 CVEs0 on KEV0 new
MS9.9
Marklogic Server
Progress
10 CVEs0 on KEV0 new
MA9.8
Moveit Automation
Progress
8 CVEs0 on KEV0 new
ML8.8
Multi-tenant Loadmaster
Progress
8 CVEs0 on KEV0 new
PR–
Progress
Progress
5 CVEs0 on KEV0 new
SC6.1
Sitefinity Cms
Progress
5 CVEs0 on KEV0 new
FL9.8
Flowmon
Progress
4 CVEs0 on KEV0 new
FA8.8
Flowmon Anomaly Detection System
Progress
4 CVEs0 on KEV0 new
TD8.8
Telerik Document Processing Libraries
Progress
3 CVEs0 on KEV0 new
TU9.8
Telerik UI For Winforms
Progress
3 CVEs0 on KEV0 new
DO9.8
Datadirect Odbc Oracle Wire Protocol Driver
Progress
2 CVEs0 on KEV0 new
HD8.4
Hybrid Data Pipeline
Progress
2 CVEs0 on KEV0 new
IW6.1
Ipswitch WS Ftp Server
Progress
2 CVEs0 on KEV0 new
MH6.8
Multi-tenant Hypervisor
Progress
2 CVEs0 on KEV0 new
OI9.9
Openedge Innovation
Progress
2 CVEs0 on KEV0 new
WE–
Webspeed
Progress
2 CVEs0 on KEV0 new
WM–
Webspeed Messenger
Progress
2 CVEs0 on KEV0 new
4C–
4gl Compiler
Progress
1 CVEs0 on KEV0 new
CI5.5
Chef Infra Server
Progress
1 CVEs0 on KEV0 new
DA–
Database
Progress
1 CVEs0 on KEV0 new
FI7.8
Fiddler
Progress
1 CVEs0 on KEV0 new
FO6.1
Flowmon OS
Progress
1 CVEs0 on KEV0 new
FP7.5
Flowmon Packet Investigator
Progress
1 CVEs0 on KEV0 new
KU7.2
Kendo UI For Vue
Progress
1 CVEs0 on KEV0 new
KE7.2
Kendoreact
Progress
1 CVEs0 on KEV0 new
MI7.5
Mixlib-archive
Progress
1 CVEs0 on KEV0 new
MG9.1
Moveit Gateway
Progress
1 CVEs0 on KEV0 new
MW6.8
Moveit Waf
Progress
1 CVEs0 on KEV0 new
OE8.8
Openedge Explorer
Progress
1 CVEs0 on KEV0 new
OM8.8
Openedge Management
Progress
1 CVEs0 on KEV0 new
TE5.3
Telerik Extensions For Asp.net Mvc
Progress
1 CVEs0 on KEV0 new
TJ7.8
Telerik Justdecompile
Progress
1 CVEs0 on KEV0 new
TT7.8
Telerik Test Studio
Progress
1 CVEs0 on KEV0 new
TU7.8
Telerik UI For Winui
Progress
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108116 | KU Kendo UI Progress | 7.5 | Oct 15 | MDX and SOAP Injection in Kendo UI for jQuery |
| CVE-2026-106153 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar |
| CVE-2026-106151 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery |
| CVE-2026-106149 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery Menu |
| CVE-2026-106148 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery |
| CVE-2026-106147 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery |
| CVE-2026-106161 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery |
| CVE-2026-106160 | KU Kendo UI Progress | 5.4 | Oct 15 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery |
| CVE-2026-106159 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery |
| CVE-2026-106158 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery |
| CVE-2026-106157 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery |
| CVE-2026-106162 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery |
| CVE-2026-106163 | KU Kendo UI Progress | 6.5 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser |
| CVE-2026-89077 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Identity validation flaw in SFTP authentication |
| CVE-2026-89076 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer SQL injection in custom reporting |
| CVE-2026-89075 | MT MOVEit Transfer Progress | 7.3 | Oct 14 | MOVEit Transfer Local Disclosure of Session Information Vulnerability |
| CVE-2026-89074 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Email MFA Bypass |
| CVE-2026-89073 | MT MOVEit Transfer Progress | 9.8 | Oct 14 | MOVEit Transfer Access restriction bypass in OAuth authentication |
| CVE-2026-89072 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Authorization Flaw in Certificate Management |
| CVE-2026-89071 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer LDAP injection in certificate-based authentication |
| CVE-2026-89070 | MT MOVEit Transfer Progress | 7.5 | Oct 14 | MOVEit Transfer OIDC Authentication Replay Vulnerability |
| CVE-2026-89069 | MT MOVEit Transfer Progress | 5.4 | Oct 14 | MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages |
| CVE-2026-89068 | MT MOVEit Transfer Progress | 9.8 | Oct 14 | MOVEit Transfer Authentication bypass in LDAP sign-on |
| CVE-2026-89067 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Secure Messaging Authentication Bypass |
| CVE-2026-87093 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation |
| CVE-2026-93695 | SS ShareFile Storage Zones Controller Progress | 7.4 | Oct 12 | Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService |
| CVE-2026-93694 | SS ShareFile Storage Zones Controller Progress | 4.0 | Oct 12 | Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller |
| CVE-2026-93693 | SS ShareFile Storage Zones Controller Progress | 6.5 | Oct 12 | Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller |
| CVE-2026-16137 | SS ShareFile Storage Zones Controller Progress | 7.2 | Aug 17 | Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller |
| CVE-2026-16138 | SS ShareFile Storage Zones Controller Progress | 8.0 | Aug 17 | Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service |
| CVE-2026-16139 | SS ShareFile Storage Zones Controller Progress | 7.2 | Aug 17 | Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution |
| CVE-2026-65941 | WG WhatsUp Gold Progress | 8.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. |
| CVE-2026-65940 | WG WhatsUp Gold Progress | 6.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. |
| CVE-2026-65939 | WG WhatsUp Gold Progress | 6.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler. |
| CVE-2026-65938 | WG WhatsUp Gold Progress | 4.3 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API. |
| CVE-2026-65937 | WG WhatsUp Gold Progress | 8.0 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI |
| CVE-2026-9203 | MS Marklogic Server Progress | 8.5 | Aug 5 | Server-side request forgery in Progress MarkLogic Server |
| CVE-2026-9195 | MS Marklogic Server Progress | 9.3 | Aug 5 | Cross-site scripting in Progress MarkLogic Server Query Console |
| CVE-2026-9193 | MS Marklogic Server Progress | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server Hadoop integration |
| CVE-2026-9192 | MS Marklogic Server Progress | 9.8 | Aug 5 | Authentication bypass in Progress MarkLogic Server ODBC App Server |
| CVE-2026-9190 | MS Marklogic Server Progress | 9.1 | Aug 5 | HTTP request smuggling in Progress MarkLogic Server |
| CVE-2026-8709 | MS Marklogic Server Progress | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST document patch operation |
| CVE-2026-7557 | MS Marklogic Server Progress | 9.1 | Aug 5 | SAML authentication bypass in Progress MarkLogic Server |
| CVE-2026-7329 | MS Marklogic Server Progress | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST query interfaces |
| CVE-2026-7327 | MS Marklogic Server Progress | 8.1 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST API document processing |
| CVE-2026-7326 | MS Marklogic Server Progress | 8.8 | Aug 5 | Cross-site request forgery in Progress MarkLogic Server Admin UI |
| CVE-2026-59690 | CM Connection Manager For Objectscale Progress | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API |
| CVE-2026-59689 | MW Moveit Web Application Firewall Progress | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root |
| CVE-2026-59688 | CM Connection Manager For Objectscale Progress | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality |
| CVE-2026-59687 | MW Moveit Web Application Firewall Progress | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface |
| CVE-2026-59686 | MW Moveit Web Application Firewall Progress | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface |
| CVE-2026-15968 | MT MOVEit Transfer Progress | 5.4 | Jul 23 | Stored XSS vulnerability in MOVEit Transfer |
| CVE-2026-15967 | MT MOVEit Transfer Progress | 9.8 | Jul 23 | MOVEit Transfer refresh-token processing does not enforce updated account restrictions |
| CVE-2026-15966 | MT MOVEit Transfer Progress | 9.8 | Jul 23 | Improper CORS handling in MOVEit Transfer |
| CVE-2026-10697 | MT MOVEit Transfer Progress | 9.8 | Jul 23 | MFA Bypass in MOVEit Transfer |
| CVE-2026-14932 | TU Telerik UI For Asp.net Ajax Progress | 6.5 | Jul 22 | Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart |
| CVE-2026-14865 | TU Telerik UI For Asp.net Ajax Progress | 5.3 | Jul 22 | XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX |
| CVE-2026-13192 | TU Telerik UI For Asp.net Ajax Progress | 6.5 | Jul 22 | RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX |
| CVE-2026-13190 | TU Telerik UI For Asp.net Ajax Progress | 8.1 | Jul 22 | PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX |
| CVE-2026-13189 | TU Telerik UI For Asp.net Ajax Progress | 7.5 | Jul 22 | SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX |
