PR
Vendor
Progress
452
CVEs
16
On KEV
28
New 30D
Products
MT9.8
MOVEit Transfer
File Transfer
50 CVEs1 on KEV12 new
KU7.5
Kendo UI
Progress
14 CVEs0 on KEV13 new
SS9.8
ShareFile Storage Zones Controller
Progress
9 CVEs0 on KEV3 new
WG9.8
WhatsUp Gold
IT Management
62 CVEs2 on KEV0 new
LO9.8
LoadMaster
Progress
27 CVEs2 on KEV0 new
TU9.8
Telerik UI for ASP.NET AJAX
Progress
22 CVEs2 on KEV0 new
WS9.6
WS_FTP Server
Progress
28 CVEs1 on KEV0 new
SI9.8
Sitefinity
Progress
24 CVEs1 on KEV0 new
CM9.8
Connection Manager For Objectscale*
Progress
12 CVEs1 on KEV0 new
EC9.8
Ecs Connection Manager
Progress
12 CVEs1 on KEV0 new
TR9.8
Telerik Report Server
Progress
10 CVEs1 on KEV0 new
MW9.8
Moveit Web Application Firewall
Progress
7 CVEs1 on KEV0 new
AA9.8
ASP.NET AJAX and Sitefinity
Progress
1 CVEs1 on KEV0 new
KL9.8
Kemp LoadMaster
Progress
1 CVEs1 on KEV0 new
MC9.8
Moveit Cloud
Progress
1 CVEs1 on KEV0 new
TR9.8
Telerik Reporting
Progress
15 CVEs0 on KEV0 new
OP9.9
OpenEdge
Progress
12 CVEs0 on KEV0 new
MS9.9
Marklogic Server
Progress
10 CVEs0 on KEV0 new
MA9.8
Moveit Automation
Progress
8 CVEs0 on KEV0 new
ML8.8
Multi-tenant Loadmaster
Progress
8 CVEs0 on KEV0 new
PR–
Progress
Progress
5 CVEs0 on KEV0 new
SC6.1
Sitefinity Cms
Progress
5 CVEs0 on KEV0 new
FL9.8
Flowmon
Progress
4 CVEs0 on KEV0 new
FA8.8
Flowmon Anomaly Detection System
Progress
4 CVEs0 on KEV0 new
TD8.8
Telerik Document Processing Libraries
Progress
3 CVEs0 on KEV0 new
TU9.8
Telerik UI For Winforms
Progress
3 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC Autonomous REST Connector
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Amazon Redshift
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Apache Cassandra
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Apache Impala
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Apache SparkSQL
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for DB2
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Google Analytics 4
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Google BigQuery
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Greenplum
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Hive
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Informix
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Microsoft Dynamics 365
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Microsoft Sharepoint
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Microsoft SQLServer
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for MongoDB
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for MySQL
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Oracle Database
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Oracle Eloqua
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Oracle Sales Cloud
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Oracle Service Cloud
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for PostgreSQL
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Progress OpenEdge
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Salesforce
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for SAP HANA
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for SAP S/4 HANA
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Snowflake
Progress
2 CVEs0 on KEV0 new
DC8.6
DataDirect Connect for JDBC for Sybase ASE
Progress
2 CVEs0 on KEV0 new
DH8.6
DataDirect Hybrid Data Pipeline Docker
Progress
2 CVEs0 on KEV0 new
DH8.6
DataDirect Hybrid Data Pipeline JDBC Driver
Progress
2 CVEs0 on KEV0 new
DH8.6
DataDirect Hybrid Data Pipeline On Premises Connector
Progress
2 CVEs0 on KEV0 new
DH8.6
DataDirect Hybrid Data Pipeline Server
Progress
2 CVEs0 on KEV0 new
DO9.8
Datadirect Odbc Oracle Wire Protocol Driver
Progress
2 CVEs0 on KEV0 new
DO8.6
DataDirect OpenAccess JDBC Driver
Progress
2 CVEs0 on KEV0 new
HD8.4
Hybrid Data Pipeline
Progress
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108116 | KU Kendo UI Progress | 7.5 | Oct 15 | MDX and SOAP Injection in Kendo UI for jQuery |
| CVE-2026-106153 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar |
| CVE-2026-106151 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery |
| CVE-2026-106149 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery Menu |
| CVE-2026-106148 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery |
| CVE-2026-106147 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery |
| CVE-2026-106161 | KU Kendo UI Progress | 5.4 | Oct 15 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery |
| CVE-2026-106160 | KU Kendo UI Progress | 5.4 | Oct 15 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery |
| CVE-2026-106159 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery |
| CVE-2026-106158 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery |
| CVE-2026-106157 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery |
| CVE-2026-106162 | KU Kendo UI Progress | 4.7 | Oct 15 | Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery |
| CVE-2026-106163 | KU Kendo UI Progress | 6.5 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser |
| CVE-2026-89077 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Identity validation flaw in SFTP authentication |
| CVE-2026-89076 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer SQL injection in custom reporting |
| CVE-2026-89075 | MT MOVEit Transfer Progress | 7.3 | Oct 14 | MOVEit Transfer Local Disclosure of Session Information Vulnerability |
| CVE-2026-89074 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Email MFA Bypass |
| CVE-2026-89073 | MT MOVEit Transfer Progress | 9.8 | Oct 14 | MOVEit Transfer Access restriction bypass in OAuth authentication |
| CVE-2026-89072 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Authorization Flaw in Certificate Management |
| CVE-2026-89071 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer LDAP injection in certificate-based authentication |
| CVE-2026-89070 | MT MOVEit Transfer Progress | 7.5 | Oct 14 | MOVEit Transfer OIDC Authentication Replay Vulnerability |
| CVE-2026-89069 | MT MOVEit Transfer Progress | 5.4 | Oct 14 | MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages |
| CVE-2026-89068 | MT MOVEit Transfer Progress | 9.8 | Oct 14 | MOVEit Transfer Authentication bypass in LDAP sign-on |
| CVE-2026-89067 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Secure Messaging Authentication Bypass |
| CVE-2026-87093 | MT MOVEit Transfer Progress | 8.8 | Oct 14 | MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege Escalation |
| CVE-2026-93695 | SS ShareFile Storage Zones Controller Progress | 7.4 | Oct 12 | Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService |
| CVE-2026-93694 | SS ShareFile Storage Zones Controller Progress | 4.0 | Oct 12 | Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller |
| CVE-2026-93693 | SS ShareFile Storage Zones Controller Progress | 6.5 | Oct 12 | Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller |
| CVE-2026-16137 | SS ShareFile Storage Zones Controller Progress | 7.2 | Aug 17 | Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller |
| CVE-2026-16138 | SS ShareFile Storage Zones Controller Progress | 8.0 | Aug 17 | Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service |
| CVE-2026-16139 | SS ShareFile Storage Zones Controller Progress | 7.2 | Aug 17 | Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution |
| CVE-2026-65941 | WG WhatsUp Gold Progress | 8.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service. |
| CVE-2026-65940 | WG WhatsUp Gold Progress | 6.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 excessive file system permissions allows a privileged attacker to write arbitrary files to a web-accessible location on the host server. |
| CVE-2026-65939 | WG WhatsUp Gold Progress | 6.8 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an arbitrary file write vulnerability in the LogToFile action handler. |
| CVE-2026-65938 | WG WhatsUp Gold Progress | 4.3 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain an improper authorization vulnerability in the Scheduled Reports API. |
| CVE-2026-65937 | WG WhatsUp Gold Progress | 8.0 | Aug 12 | WhatsUp Gold versions prior to 26.0.2 contain multiple stored cross-site scripting (XSS) vulnerabilities across the web UI |
| CVE-2026-9203 | MS Marklogic Server Progress | 8.5 | Aug 5 | Server-side request forgery in Progress MarkLogic Server |
| CVE-2026-9195 | MS Marklogic Server Progress | 9.3 | Aug 5 | Cross-site scripting in Progress MarkLogic Server Query Console |
| CVE-2026-9193 | MS Marklogic Server Progress | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server Hadoop integration |
| CVE-2026-9192 | MS Marklogic Server Progress | 9.8 | Aug 5 | Authentication bypass in Progress MarkLogic Server ODBC App Server |
| CVE-2026-9190 | MS Marklogic Server Progress | 9.1 | Aug 5 | HTTP request smuggling in Progress MarkLogic Server |
| CVE-2026-8709 | MS Marklogic Server Progress | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST document patch operation |
| CVE-2026-7557 | MS Marklogic Server Progress | 9.1 | Aug 5 | SAML authentication bypass in Progress MarkLogic Server |
| CVE-2026-7329 | MS Marklogic Server Progress | 9.9 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST query interfaces |
| CVE-2026-7327 | MS Marklogic Server Progress | 8.1 | Aug 5 | Privilege escalation in Progress MarkLogic Server REST API document processing |
| CVE-2026-7326 | MS Marklogic Server Progress | 8.8 | Aug 5 | Cross-site request forgery in Progress MarkLogic Server Admin UI |
| CVE-2026-59690 | LO Loadmaster Progress | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API |
| CVE-2026-59689 | LO Loadmaster Progress | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root |
| CVE-2026-59688 | LO Loadmaster Progress | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality |
| CVE-2026-59687 | EC Ecs Connection Manager Progress | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface |
| CVE-2026-59686 | MW Moveit Web Application Firewall Progress | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface |
| CVE-2026-15968 | MT MOVEit Transfer Progress | 5.4 | Jul 23 | Stored XSS vulnerability in MOVEit Transfer |
| CVE-2026-15967 | MT MOVEit Transfer Progress | 9.8 | Jul 23 | MOVEit Transfer refresh-token processing does not enforce updated account restrictions |
| CVE-2026-15966 | MT MOVEit Transfer Progress | 9.8 | Jul 23 | Improper CORS handling in MOVEit Transfer |
| CVE-2026-10697 | MT MOVEit Transfer Progress | 9.8 | Jul 23 | MFA Bypass in MOVEit Transfer |
| CVE-2026-14932 | TU Telerik UI For Asp.net Ajax Progress | 6.5 | Jul 22 | Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart |
| CVE-2026-14865 | TU Telerik UI For Asp.net Ajax Progress | 5.3 | Jul 22 | XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX |
| CVE-2026-13192 | TU Telerik UI For Asp.net Ajax Progress | 6.5 | Jul 22 | RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX |
| CVE-2026-13190 | TU Telerik UI For Asp.net Ajax Progress | 8.1 | Jul 22 | PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX |
| CVE-2026-13189 | TU Telerik UI For Asp.net Ajax Progress | 7.5 | Jul 22 | SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX |
