PR
Vendor
Progress
50 products with CVEs on record
384
CVEs
16
On KEV
28
New 30D
Products
MT
MOVEit Transfer
File Transfer
9.8
49 CVEs1 on KEV12 new
KU
Kendo UI
Progress
7.5
14 CVEs0 on KEV13 new
SS
ShareFile Storage Zones Controller
Progress
9.8
9 CVEs0 on KEV3 new
WG
WhatsUp Gold
IT Management
9.8
62 CVEs2 on KEV0 new
LO
LoadMaster
Progress
9.8
27 CVEs2 on KEV0 new
TU
Telerik UI for ASP.NET AJAX
Progress
9.8
22 CVEs2 on KEV0 new
WS
WS_FTP Server
Progress
9.6
28 CVEs1 on KEV0 new
SI
Sitefinity
Progress
9.8
24 CVEs1 on KEV0 new
CM
Connection Manager For Objectscale*
Progress
9.8
12 CVEs1 on KEV0 new
EC
Ecs Connection Manager
Progress
9.8
12 CVEs1 on KEV0 new
TR
Telerik Report Server
Progress
9.8
8 CVEs1 on KEV0 new
MW
Moveit Web Application Firewall
Progress
9.8
7 CVEs1 on KEV0 new
AA
ASP.NET AJAX and Sitefinity
Progress
9.8
1 CVEs1 on KEV0 new
KL
Kemp LoadMaster
Progress
9.8
1 CVEs1 on KEV0 new
MC
Moveit Cloud
Progress
9.8
1 CVEs1 on KEV0 new
TR
Telerik Reporting
Progress
9.8
14 CVEs0 on KEV0 new
OP
OpenEdge
Progress
9.9
12 CVEs0 on KEV0 new
MS
Marklogic Server
Progress
9.9
10 CVEs0 on KEV0 new
MA
Moveit Automation
Progress
9.8
8 CVEs0 on KEV0 new
ML
Multi-tenant Loadmaster
Progress
8.8
8 CVEs0 on KEV0 new
PR
Progress
Progress
–
5 CVEs0 on KEV0 new
SC
Sitefinity Cms
Progress
6.1
5 CVEs0 on KEV0 new
FL
Flowmon
Progress
9.8
4 CVEs0 on KEV0 new
FA
Flowmon Anomaly Detection System
Progress
8.8
4 CVEs0 on KEV0 new
TD
Telerik Document Processing Libraries
Progress
8.8
3 CVEs0 on KEV0 new
TU
Telerik UI For Winforms
Progress
9.8
3 CVEs0 on KEV0 new
DO
Datadirect Odbc Oracle Wire Protocol Driver
Progress
9.8
2 CVEs0 on KEV0 new
HD
Hybrid Data Pipeline
Progress
8.4
2 CVEs0 on KEV0 new
IW
Ipswitch WS Ftp Server
Progress
6.1
2 CVEs0 on KEV0 new
MH
Multi-tenant Hypervisor
Progress
6.8
2 CVEs0 on KEV0 new
OI
Openedge Innovation
Progress
9.9
2 CVEs0 on KEV0 new
WE
Webspeed
Progress
–
2 CVEs0 on KEV0 new
WM
Webspeed Messenger
Progress
–
2 CVEs0 on KEV0 new
4C
4gl Compiler
Progress
–
1 CVEs0 on KEV0 new
CI
Chef Infra Server
Progress
5.5
1 CVEs0 on KEV0 new
DA
Database
Progress
–
1 CVEs0 on KEV0 new
FI
Fiddler
Progress
7.8
1 CVEs0 on KEV0 new
FO
Flowmon OS
Progress
6.1
1 CVEs0 on KEV0 new
FP
Flowmon Packet Investigator
Progress
7.5
1 CVEs0 on KEV0 new
KU
Kendo UI For Vue
Progress
7.2
1 CVEs0 on KEV0 new
KE
Kendoreact
Progress
7.2
1 CVEs0 on KEV0 new
MI
Mixlib-archive
Progress
7.5
1 CVEs0 on KEV0 new
MG
Moveit Gateway
Progress
9.1
1 CVEs0 on KEV0 new
MW
Moveit Waf
Progress
6.8
1 CVEs0 on KEV0 new
OE
Openedge Explorer
Progress
8.8
1 CVEs0 on KEV0 new
OM
Openedge Management
Progress
8.8
1 CVEs0 on KEV0 new
TE
Telerik Extensions For Asp.net Mvc
Progress
5.3
1 CVEs0 on KEV0 new
TJ
Telerik Justdecompile
Progress
7.8
1 CVEs0 on KEV0 new
TT
Telerik Test Studio
Progress
7.8
1 CVEs0 on KEV0 new
TU
Telerik UI For Winui
Progress
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-108116
KU
Kendo UI
Progress
7.5
0%
Oct 15MDX and SOAP Injection in Kendo UI for jQuery
CVE-2026-106153
KU
Kendo UI
Progress
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar
CVE-2026-106151
KU
Kendo UI
Progress
5.4
0%
Oct 15Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery
CVE-2026-106149
KU
Kendo UI
Progress
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Menu
CVE-2026-106148
KU
Kendo UI
Progress
5.4
0%
Oct 15Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery
CVE-2026-106147
KU
Kendo UI
Progress
5.4
0%
Oct 15Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery
CVE-2026-106161
KU
Kendo UI
Progress
5.4
0%
Oct 15Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery
CVE-2026-106160
KU
Kendo UI
Progress
5.4
0%
Oct 15Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery
CVE-2026-106159
KU
Kendo UI
Progress
4.7
0%
Oct 15Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery
CVE-2026-106158
KU
Kendo UI
Progress
4.7
0%
Oct 15Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery
CVE-2026-106157
KU
Kendo UI
Progress
4.7
0%
Oct 15Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery
CVE-2026-106162
KU
Kendo UI
Progress
4.7
0%
Oct 15Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery
CVE-2026-106163
KU
Kendo UI
Progress
6.5
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
CVE-2026-89077
MT
MOVEit Transfer
Progress
8.8
0%
Oct 14MOVEit Transfer Identity validation flaw in SFTP authentication
CVE-2026-89076
MT
MOVEit Transfer
Progress
8.8
1%
Oct 14MOVEit Transfer SQL injection in custom reporting
CVE-2026-89075
MT
MOVEit Transfer
Progress
7.3
0%
Oct 14MOVEit Transfer Local Disclosure of Session Information Vulnerability
CVE-2026-89074
MT
MOVEit Transfer
Progress
8.8
0%
Oct 14MOVEit Transfer Email MFA Bypass
CVE-2026-89073
MT
MOVEit Transfer
Progress
9.8
0%
Oct 14MOVEit Transfer Access restriction bypass in OAuth authentication
CVE-2026-89072
MT
MOVEit Transfer
Progress
8.8
0%
Oct 14MOVEit Transfer Authorization Flaw in Certificate Management
CVE-2026-89071
MT
MOVEit Transfer
Progress
8.8
1%
Oct 14MOVEit Transfer LDAP injection in certificate-based authentication
CVE-2026-89070
MT
MOVEit Transfer
Progress
7.5
0%
Oct 14MOVEit Transfer OIDC Authentication Replay Vulnerability
CVE-2026-89069
MT
MOVEit Transfer
Progress
5.4
0%
Oct 14MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages
CVE-2026-89068
MT
MOVEit Transfer
Progress
9.8
1%
Oct 14MOVEit Transfer Authentication bypass in LDAP sign-on
CVE-2026-89067
MT
MOVEit Transfer
Progress
8.8
1%
Oct 14MOVEit Transfer Secure Messaging Authentication Bypass
CVE-2026-87093
MT
MOVEit Transfer
Progress
8.8
0%
Oct 14MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation
CVE-2026-93695
SS
ShareFile Storage Zones Controller
Progress
7.4
0%
Oct 12Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService
CVE-2026-93694
SS
ShareFile Storage Zones Controller
Progress
4.0
0%
Oct 12Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller
CVE-2026-93693
SS
ShareFile Storage Zones Controller
Progress
6.5
0%
Oct 12Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller
CVE-2026-16137
SS
ShareFile Storage Zones Controller
Progress
7.2
1%
Aug 17Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller
CVE-2026-16138
SS
ShareFile Storage Zones Controller
Progress
8.0
1%
Aug 17Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service
CVE-2026-16139
SS
ShareFile Storage Zones Controller
Progress
7.2
1%
Aug 17Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution
CVE-2026-65941
WG
WhatsUp Gold
Progress
8.8
1%
Aug 12WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.
CVE-2026-65940
WG
WhatsUp Gold
Progress
6.8
0%
Aug 12WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server.
CVE-2026-65939
WG
WhatsUp Gold
Progress
6.8
0%
Aug 12WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler.
CVE-2026-65938
WG
WhatsUp Gold
Progress
4.3
0%
Aug 12WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API.
CVE-2026-65937
WG
WhatsUp Gold
Progress
8.0
0%
Aug 12WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI
CVE-2026-9203
MS
Marklogic Server
Progress
8.5
0%
Aug 5Server-side request forgery in Progress MarkLogic Server
CVE-2026-9195
MS
Marklogic Server
Progress
9.3
1%
Aug 5Cross-site scripting in Progress MarkLogic Server Query Console
CVE-2026-9193
MS
Marklogic Server
Progress
9.9
0%
Aug 5Privilege escalation in Progress MarkLogic Server Hadoop integration
CVE-2026-9192
MS
Marklogic Server
Progress
9.8
1%
Aug 5Authentication bypass in Progress MarkLogic Server ODBC App Server
CVE-2026-9190
MS
Marklogic Server
Progress
9.1
1%
Aug 5HTTP request smuggling in Progress MarkLogic Server
CVE-2026-8709
MS
Marklogic Server
Progress
9.9
0%
Aug 5Privilege escalation in Progress MarkLogic Server REST document patch operation
CVE-2026-7557
MS
Marklogic Server
Progress
9.1
0%
Aug 5SAML authentication bypass in Progress MarkLogic Server
CVE-2026-7329
MS
Marklogic Server
Progress
9.9
1%
Aug 5Privilege escalation in Progress MarkLogic Server REST query interfaces
CVE-2026-7327
MS
Marklogic Server
Progress
8.1
0%
Aug 5Privilege escalation in Progress MarkLogic Server REST API document processing
CVE-2026-7326
MS
Marklogic Server
Progress
8.8
0%
Aug 5Cross-site request forgery in Progress MarkLogic Server Admin UI
CVE-2026-59690
CM
Connection Manager For Objectscale
Progress
8.0
0%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API
CVE-2026-59689
MW
Moveit Web Application Firewall
Progress
8.0
0%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
CVE-2026-59688
CM
Connection Manager For Objectscale
Progress
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality
CVE-2026-59687
MW
Moveit Web Application Firewall
Progress
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface
CVE-2026-59686
MW
Moveit Web Application Firewall
Progress
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface
CVE-2026-15968
MT
MOVEit Transfer
Progress
5.4
0%
Jul 23Stored XSS vulnerability in MOVEit Transfer
CVE-2026-15967
MT
MOVEit Transfer
Progress
9.8
0%
Jul 23MOVEit Transfer refresh-token processing does not enforce updated account restrictions
CVE-2026-15966
MT
MOVEit Transfer
Progress
9.8
0%
Jul 23Improper CORS handling in MOVEit Transfer
CVE-2026-10697
MT
MOVEit Transfer
Progress
9.8
1%
Jul 23MFA Bypass in MOVEit Transfer
CVE-2026-14932
TU
Telerik UI For Asp.net Ajax
Progress
6.5
0%
Jul 22Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart
CVE-2026-14865
TU
Telerik UI For Asp.net Ajax
Progress
5.3
0%
Jul 22XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX
CVE-2026-13192
TU
Telerik UI For Asp.net Ajax
Progress
6.5
0%
Jul 22RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13190
TU
Telerik UI For Asp.net Ajax
Progress
8.1
1%
Jul 22PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13189
TU
Telerik UI For Asp.net Ajax
Progress
7.5
0%
Jul 22SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX