PS
Vendor
Progress Software
40 products with CVEs on record
178
CVEs
6
On KEV
46
New 30D
Products
WS
WS_FTP Server
Progress Software
10.0
16 CVEs0 on KEV15 new
KU
Kendo UI for jQuery
Progress Software
7.5
15 CVEs0 on KEV14 new
TD
Telerik Document Processing Libraries
Progress Software
8.8
9 CVEs0 on KEV7 new
TR
Telerik Report Server
Progress Software
9.8
8 CVEs1 on KEV2 new
PT
Progress® Telerik® Fiddler® Classic
Progress Software
7.9
4 CVEs0 on KEV4 new
AR
Autonomous REST Connector GenAI Agents
Progress Software
9.6
1 CVEs0 on KEV1 new
KE
KendoReact
Progress Software
5.4
2 CVEs0 on KEV1 new
KU
Kendo UI for Vue
Progress Software
5.4
1 CVEs0 on KEV1 new
PR
@progress/sitefinity-nextjs-sdk
Progress Software
8.8
1 CVEs0 on KEV1 new
LO
LoadMaster
Progress Software
9.8
15 CVEs2 on KEV0 new
MW
MOVEit WAF
Progress Software
9.8
10 CVEs1 on KEV0 new
OS
Object Scale Connection Manager
Progress Software
9.8
10 CVEs1 on KEV0 new
EC
ECS Connections Manager
Progress Software
9.8
5 CVEs1 on KEV0 new
TU
Telerik UI for ASP.NET AJAX
Progress Software
9.8
19 CVEs0 on KEV0 new
FL
Flowmon
Progress Software
9.8
7 CVEs0 on KEV0 new
MA
MOVEit Automation
Progress Software
9.8
6 CVEs0 on KEV0 new
EC
ECS Connection Manager
Progress Software
8.4
5 CVEs0 on KEV0 new
SI
Sitefinity
Progress Software
9.8
5 CVEs0 on KEV0 new
TR
Telerik Reporting
Progress Software
8.8
5 CVEs0 on KEV0 new
TU
Telerik UI for WPF
Progress Software
9.8
5 CVEs0 on KEV0 new
FA
Flowmon ADS
Progress Software
8.8
4 CVEs0 on KEV0 new
CA
Chef Automate
Progress Software
10.0
3 CVEs0 on KEV0 new
HD
Hybrid Data Pipeline
Progress Software
8.4
2 CVEs0 on KEV0 new
PT
Progress® Telerik® Fiddler® Everywhere
Progress Software
7.7
2 CVEs0 on KEV0 new
PT
Progress Telerik UI For Wpf Versions
Progress Software
7.8
2 CVEs0 on KEV0 new
TU
Telerik UI for WinForms
Progress Software
7.8
2 CVEs0 on KEV0 new
CI
Chef Inspec
Progress Software
5.8
1 CVEs0 on KEV0 new
KU
Kendo UI for Angular
Progress Software
5.4
1 CVEs0 on KEV0 new
MT
Multi Tenant
Progress Software
8.0
1 CVEs0 on KEV0 new
MT
Multi Tenant LoadMaster
Progress Software
6.8
1 CVEs0 on KEV0 new
PT
Progress® Telerik® Document Processing Libraries
Progress Software
6.5
1 CVEs0 on KEV0 new
PT
Progress® Telerik® Kendo UI for Vue
Progress Software
7.2
1 CVEs0 on KEV0 new
PT
Progress® Telerik® UI for WinForms
Progress Software
9.8
1 CVEs0 on KEV0 new
TJ
Telerik JustDecompile
Progress Software
7.8
1 CVEs0 on KEV0 new
TK
Telerik KendoReact
Progress Software
7.2
1 CVEs0 on KEV0 new
TT
Telerik Test Studio
Progress Software
7.8
1 CVEs0 on KEV0 new
TU
Telerik UI for ASP.NET Core
Progress Software
5.4
1 CVEs0 on KEV0 new
TU
Telerik UI for ASP.NET MVC
Progress Software
5.4
1 CVEs0 on KEV0 new
TU
Telerik UI for Blazor
Progress Software
5.4
1 CVEs0 on KEV0 new
TU
Telerik UI for WinUI
Progress Software
7.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-90872
New
WS
WS_FTP Server
Progress Software
6.6–Oct 29Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server
CVE-2026-90871
New
WS
WS_FTP Server
Progress Software
5.3–Oct 29Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server
CVE-2026-90870
New
WS
WS_FTP Server
Progress Software
5.3–Oct 29Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server
CVE-2026-90869
New
WS
WS_FTP Server
Progress Software
7.5–Oct 29Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server
CVE-2026-90868
New
WS
WS_FTP Server
Progress Software
9.9–Oct 29OS Command Injection in Progress WS_FTP Server
CVE-2026-90867
New
WS
WS_FTP Server
Progress Software
8.1–Oct 29Improper Access Control of Web Admin Console in Progress WS_FTP Server
CVE-2026-90866
New
WS
WS_FTP Server
Progress Software
9.1–Oct 29Virtual Folder Path Confinement Bypass in Progress WS_FTP Server
CVE-2026-90865
New
WS
WS_FTP Server
Progress Software
9.0–Oct 29Command Injection via FTP Notification Variables in Progress WS_FTP Server
CVE-2026-90864
New
WS
WS_FTP Server
Progress Software
9.1–Oct 29Host Administrator Path Containment Bypass in Progress WS_FTP Server
CVE-2026-90863
New
WS
WS_FTP Server
Progress Software
9.1–Oct 29Privilege Escalation via Missing Authorization in WS_FTP Manager
CVE-2026-90862
New
WS
WS_FTP Server
Progress Software
4.3–Oct 29Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
CVE-2026-90861
New
WS
WS_FTP Server
Progress Software
6.6–Oct 29Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server
CVE-2026-84296
New
WS
WS_FTP Server
Progress Software
6.8–Oct 29SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server
CVE-2026-84295
New
WS
WS_FTP Server
Progress Software
10.0–Oct 29Improper Authentication in Progress WS_FTP Server
CVE-2026-84294
New
WS
WS_FTP Server
Progress Software
7.7–Oct 29Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server
CVE-2026-118037
New
TD
Telerik Document Processing Libraries
Progress Software
7.5–Oct 28Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing
CVE-2026-118036
New
TD
Telerik Document Processing Libraries
Progress Software
7.5–Oct 28Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering
CVE-2026-118035
New
TD
Telerik Document Processing Libraries
Progress Software
7.5–Oct 28Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing
CVE-2026-118040
New
TD
Telerik Document Processing Libraries
Progress Software
7.5–Oct 28Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing
CVE-2026-118039
New
TD
Telerik Document Processing Libraries
Progress Software
7.5–Oct 28XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing
CVE-2026-118038
New
TD
Telerik Document Processing Libraries
Progress Software
7.1–Oct 28Path Traversal in Telerik Document Processing Libraries AI Agent Tools
CVE-2026-108116
KU
Kendo UI for jQuery
Progress Software
7.5
0%
Oct 15MDX and SOAP Injection in Kendo UI for jQuery
CVE-2026-106153
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar
CVE-2026-106151
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery
CVE-2026-106150
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip
CVE-2026-106149
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery Menu
CVE-2026-106148
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery
CVE-2026-106147
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery
CVE-2026-106161
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery
CVE-2026-106160
KU
Kendo UI for jQuery
Progress Software
5.4
0%
Oct 15Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery
CVE-2026-106159
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery
CVE-2026-106158
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery
CVE-2026-106157
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery
CVE-2026-106162
KU
Kendo UI for jQuery
Progress Software
4.7
0%
Oct 15Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery
CVE-2026-106163
KU
Kendo UI for jQuery
Progress Software
6.5
0%
Oct 15Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser
CVE-2026-106139
KU
Kendo UI for Vue
Progress Software
5.4
0%
Oct 10Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
CVE-2026-106138
KE
KendoReact
Progress Software
5.4
0%
Oct 10Cross-Site Scripting via Chart Tooltip in KendoReact
CVE-2026-106155
TR
Telerik Report Server
Progress Software
8.9
0%
Oct 9Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
CVE-2026-106145
TR
Telerik Report Server
Progress Software
7.1
0%
Oct 9Privilege Escalation in Telerik Report Server Service-Agent Hub
CVE-2026-106164
TD
Telerik Document Processing Libraries
Progress Software
7.3
0%
Oct 7Infinite Loop in Telerik Document Processing XLS Import
CVE-2026-91140
AR
Autonomous REST Connector GenAI Agents
Progress Software
9.6
2%
Oct 6OS command injection in Progress Software Autonomous REST Connector GenAI Agents
CVE-2026-92931
PR
@progress/sitefinity-nextjs-sdk
Progress Software
8.8
0%
Oct 5CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK
CVE-2026-77805
PT
Progress® Telerik® Fiddler® Classic
Progress Software
7.9
0%
Oct 5Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic
CVE-2026-77804
PT
Progress® Telerik® Fiddler® Classic
Progress Software
6.6
0%
Oct 5Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic
CVE-2026-77803
PT
Progress® Telerik® Fiddler® Classic
Progress Software
3.6
0%
Oct 5Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® Classic
CVE-2026-77802
PT
Progress® Telerik® Fiddler® Classic
Progress Software
6.3
0%
Oct 5HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® Classic
CVE-2026-86158
PT
Progress® Telerik® Fiddler® Everywhere
Progress Software
7.7
0%
Sep 29Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere
CVE-2026-86157
PT
Progress® Telerik® Fiddler® Everywhere
Progress Software
5.6
0%
Sep 29Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere
CVE-2026-80462
CA
Chef Automate
Progress Software
10.0
2%
Sep 11Privilege Escalation in Progress Chef Automate
CVE-2026-19219
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
0%
Sep 2DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-18672
TU
Telerik UI for ASP.NET AJAX
Progress Software
7.5
1%
Sep 2RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-59690
MW
MOVEit WAF
Progress Software
8.0
0%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API
CVE-2026-59689
OS
Object Scale Connection Manager
Progress Software
8.0
0%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root
CVE-2026-59688
OS
Object Scale Connection Manager
Progress Software
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality
CVE-2026-59687
EC
ECS Connection Manager
Progress Software
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface
CVE-2026-59686
EC
ECS Connection Manager
Progress Software
8.4
2%
Jul 27Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface
CVE-2026-14932
TU
Telerik UI for ASP.NET AJAX
Progress Software
6.5
0%
Jul 22Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart
CVE-2026-14865
TU
Telerik UI for ASP.NET AJAX
Progress Software
5.3
0%
Jul 22XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX
CVE-2026-13192
TU
Telerik UI for ASP.NET AJAX
Progress Software
6.5
0%
Jul 22RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-13190
TU
Telerik UI for ASP.NET AJAX
Progress Software
8.1
1%
Jul 22PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX