Login Request a demo
PS
Vendor
Progress Software
21 products with CVEs on record
103
CVEs
6
On KEV
27
New 30D
Products
KU
Kendo UI for jQuery
Progress Software
7.5
14 CVEs0 on KEV14 new
TR
Telerik Report Server
Progress Software
9.8
3 CVEs1 on KEV2 new
PT
Progress® Telerik® Fiddler® Classic
Progress Software
7.9
4 CVEs0 on KEV4 new
AR
Autonomous REST Connector GenAI Agents
Progress Software
9.6
1 CVEs0 on KEV1 new
PT
Progress® Telerik® Fiddler® Everywhere
Progress Software
7.7
2 CVEs0 on KEV2 new
KU
Kendo UI for Vue
Progress Software
5.4
1 CVEs0 on KEV1 new
KE
KendoReact
Progress Software
5.4
1 CVEs0 on KEV1 new
PR
@progress/sitefinity-nextjs-sdk
Progress Software
8.8
1 CVEs0 on KEV1 new
TD
Telerik Document Processing Libraries
Progress Software
7.3
1 CVEs0 on KEV1 new
LO
LoadMaster
Progress Software
9.8
11 CVEs2 on KEV0 new
MW
MOVEit WAF
Progress Software
9.8
10 CVEs1 on KEV0 new
OS
Object Scale Connection Manager
Progress Software
9.8
10 CVEs1 on KEV0 new
EC
ECS Connections Manager
Progress Software
9.8
5 CVEs1 on KEV0 new
TU
Telerik UI for ASP.NET AJAX
Progress Software
9.8
17 CVEs0 on KEV0 new
MA
MOVEit Automation
Progress Software
9.8
6 CVEs0 on KEV0 new
EC
ECS Connection Manager
Progress Software
8.4
5 CVEs0 on KEV0 new
SI
Sitefinity
Progress Software
9.8
5 CVEs0 on KEV0 new
FL
Flowmon
Progress Software
8.8
3 CVEs0 on KEV0 new
CA
Chef Automate
Progress Software
10.0
1 CVEs0 on KEV0 new
FA
Flowmon ADS
Progress Software
8.1
1 CVEs0 on KEV0 new
MT
Multi Tenant
Progress Software
8.0
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-108116
KU
Kendo UI for jQuery
Progress Software
7.5
0%
Oct 15MDX and SOAP Injection in Kendo UI for jQuery
CVE-2026-106153
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar
CVE-2026-106151
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery
CVE-2026-106150
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip
CVE-2026-106149
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Menu
CVE-2026-106148
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery
CVE-2026-106147
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery
CVE-2026-106161
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery
CVE-2026-106160
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery
CVE-2026-106159
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery
CVE-2026-106158
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery
CVE-2026-106157
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery
CVE-2026-106162
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery
CVE-2026-106163
KU
Kendo UI for jQuery
Progress Software
6.5
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
CVE-2026-106139
KU
Kendo UI for Vue
Progress Software
5.4
0%
Oct 10Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
CVE-2026-106138
KE
KendoReact
Progress Software
5.4
0%
Oct 10Cross-Site Scripting via Chart Tooltip in KendoReact
CVE-2026-106155
TR
Telerik Report Server
Progress Software
8.9
0%
Oct 9Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
CVE-2026-106145
TR
Telerik Report Server
Progress Software
7.1
0%
Oct 9Privilege Escalation in Telerik Report Server Service-Agent Hub
CVE-2026-106164
TD
Telerik Document Processing Libraries
Progress Software
7.3
0%
Oct 7Infinite Loop in Telerik Document Processing XLS Import
CVE-2026-91140
AR
Autonomous REST Connector GenAI Agents
Progress Software
9.6
2%
Oct 6OS command injection in Progress Software Autonomous REST Connector GenAI Agents
CVE-2026-92931
PR
@progress/sitefinity-nextjs-sdk
Progress Software
8.8
0%
Oct 5CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK
CVE-2026-77805
PT
Progress® Telerik® Fiddler® Classic
Progress Software
7.9
0%
Oct 5Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic
CVE-2026-77804
PT
Progress® Telerik® Fiddler® Classic
Progress Software
6.6
0%
Oct 5Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic
CVE-2026-77803
PT
Progress® Telerik® Fiddler® Classic
Progress Software
3.6
0%
Oct 5Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® Classic
CVE-2026-77802
PT
Progress® Telerik® Fiddler® Classic
Progress Software
6.3
0%
Oct 5HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® Classic
CVE-2026-86158
PT
Progress® Telerik® Fiddler® Everywhere
Progress Software
7.7
0%
Sep 29Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere
CVE-2026-86157
PT
Progress® Telerik® Fiddler® Everywhere
Progress Software
5.6
0%
Sep 29Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere
CVE-2026-80462
CA
Chef Automate
Progress Software
10.0
2%
Sep 11Privilege Escalation in Progress Chef Automate
CVE-2026-19219
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
0%
Sep 2DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-18672
TU
Telerik UI for ASP.NET AJAX
Progress Software
7.5
1%
Sep 2RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-59690
MT
Multi Tenant
Progress Software
8.0
0%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API
CVE-2026-59689
LO
LoadMaster
Progress Software
8.0
0%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
CVE-2026-59688
OS
Object Scale Connection Manager
Progress Software
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality
CVE-2026-59687
EC
ECS Connection Manager
Progress Software
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface
CVE-2026-59686
MW
MOVEit WAF
Progress Software
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface
CVE-2026-14932
TU
Telerik UI for ASP.NET AJAX
Progress Software
6.5
0%
Jul 22Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart
CVE-2026-14865
TU
Telerik UI for ASP.NET AJAX
Progress Software
5.3
0%
Jul 22XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX
CVE-2026-13192
TU
Telerik UI for ASP.NET AJAX
Progress Software
6.5
0%
Jul 22RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13190
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
1%
Jul 22PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13189
TU
Telerik UI for ASP.NET AJAX
Progress Software
7.5
0%
Jul 22SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13188
TU
Telerik UI for ASP.NET AJAX
Progress Software
5.9
0%
Jul 22DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13187
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
0%
Jul 22DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13186
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
1%
Jul 22AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13185
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
1%
Jul 22PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13184
TU
Telerik UI for ASP.NET AJAX
Progress Software
7.5
0%
Jul 22RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13183
TU
Telerik UI for ASP.NET AJAX
Progress Software
7.5
0%
Jul 22RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13182
TU
Telerik UI for ASP.NET AJAX
Progress Software
7.5
0%
Jul 22RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13181
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
1%
Jul 22RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-8079
FL
Flowmon
Progress Software
7.3
0%
Jul 2Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon
CVE-2026-9272
FA
Flowmon ADS
Progress Software
8.1
0%
Jul 2Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS
CVE-2026-8037
In wildKEV
MW
MOVEit WAF
Progress Software
9.8
100%
Jun 4OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
CVE-2026-7313
SI
Sitefinity
Progress Software
4.9
0%
Jun 2CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity
CVE-2026-7312
SI
Sitefinity
Progress Software
7.5
0%
Jun 2CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity
CVE-2026-7201
SI
Sitefinity
Progress Software
8.8
0%
Jun 2CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity
CVE-2026-7198
SI
Sitefinity
Progress Software
9.8
0%
Jun 2CWE-284: Improper Access Control in web services in Progress Sitefinity
CVE-2026-7195
SI
Sitefinity
Progress Software
8.1
0%
Jun 2CWE-20: Improper Input Validation in web services in Progress Sitefinity
CVE-2026-8488
MA
MOVEit Automation
Progress Software
7.5
0%
May 20Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation
CVE-2026-8487
MA
MOVEit Automation
Progress Software
7.5
0%
May 20Incorrect default permissions vulnerability in Progress Software MOVEit Automation
CVE-2026-8486
MA
MOVEit Automation
Progress Software
7.5
0%
May 20Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation
CVE-2026-8485
MA
MOVEit Automation
Progress Software
7.5
0%
May 20Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation