PS
Vendor
Progress Software
178
CVEs
6
On KEV
46
New 30D
Products
WS10.0
WS_FTP Server
Progress Software
16 CVEs0 on KEV15 new
KU7.5
Kendo UI for jQuery
Progress Software
15 CVEs0 on KEV14 new
TD8.8
Telerik Document Processing Libraries
Progress Software
9 CVEs0 on KEV7 new
TR9.8
Telerik Report Server
Progress Software
8 CVEs1 on KEV2 new
PT7.9
Progress® Telerik® Fiddler® Classic
Progress Software
4 CVEs0 on KEV4 new
AR9.6
Autonomous REST Connector GenAI Agents
Progress Software
1 CVEs0 on KEV1 new
KE5.4
KendoReact
Progress Software
2 CVEs0 on KEV1 new
KU5.4
Kendo UI for Vue
Progress Software
1 CVEs0 on KEV1 new
PR8.8
@progress/sitefinity-nextjs-sdk
Progress Software
1 CVEs0 on KEV1 new
LO9.8
LoadMaster
Progress Software
15 CVEs2 on KEV0 new
MW9.8
MOVEit WAF
Progress Software
10 CVEs1 on KEV0 new
OS9.8
Object Scale Connection Manager
Progress Software
10 CVEs1 on KEV0 new
EC9.8
ECS Connections Manager
Progress Software
5 CVEs1 on KEV0 new
TU9.8
Telerik UI for ASP.NET AJAX
Progress Software
19 CVEs0 on KEV0 new
FL9.8
Flowmon
Progress Software
7 CVEs0 on KEV0 new
MA9.8
MOVEit Automation
Progress Software
6 CVEs0 on KEV0 new
EC8.4
ECS Connection Manager
Progress Software
5 CVEs0 on KEV0 new
SI9.8
Sitefinity
Progress Software
5 CVEs0 on KEV0 new
TR8.8
Telerik Reporting
Progress Software
5 CVEs0 on KEV0 new
TU9.8
Telerik UI for WPF
Progress Software
5 CVEs0 on KEV0 new
FA8.8
Flowmon ADS
Progress Software
4 CVEs0 on KEV0 new
CA10.0
Chef Automate
Progress Software
3 CVEs0 on KEV0 new
HD8.4
Hybrid Data Pipeline
Progress Software
2 CVEs0 on KEV0 new
PT7.7
Progress® Telerik® Fiddler® Everywhere
Progress Software
2 CVEs0 on KEV0 new
PT7.8
Progress Telerik UI For Wpf Versions
Progress Software
2 CVEs0 on KEV0 new
TU7.8
Telerik UI for WinForms
Progress Software
2 CVEs0 on KEV0 new
CI5.8
Chef Inspec
Progress Software
1 CVEs0 on KEV0 new
KU5.4
Kendo UI for Angular
Progress Software
1 CVEs0 on KEV0 new
MT8.0
Multi Tenant
Progress Software
1 CVEs0 on KEV0 new
MT6.8
Multi Tenant LoadMaster
Progress Software
1 CVEs0 on KEV0 new
PT6.5
Progress® Telerik® Document Processing Libraries
Progress Software
1 CVEs0 on KEV0 new
PT7.2
Progress® Telerik® Kendo UI for Vue
Progress Software
1 CVEs0 on KEV0 new
PT9.8
Progress® Telerik® UI for WinForms
Progress Software
1 CVEs0 on KEV0 new
TJ7.8
Telerik JustDecompile
Progress Software
1 CVEs0 on KEV0 new
TK7.2
Telerik KendoReact
Progress Software
1 CVEs0 on KEV0 new
TT7.8
Telerik Test Studio
Progress Software
1 CVEs0 on KEV0 new
TU5.4
Telerik UI for ASP.NET Core
Progress Software
1 CVEs0 on KEV0 new
TU5.4
Telerik UI for ASP.NET MVC
Progress Software
1 CVEs0 on KEV0 new
TU5.4
Telerik UI for Blazor
Progress Software
1 CVEs0 on KEV0 new
TU7.8
Telerik UI for WinUI
Progress Software
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-90872 New | WS WS_FTP Server Progress Software | 6.6 | Oct 29 | Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server |
| CVE-2026-90871 New | WS WS_FTP Server Progress Software | 5.3 | Oct 29 | Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server |
| CVE-2026-90870 New | WS WS_FTP Server Progress Software | 5.3 | Oct 29 | Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server |
| CVE-2026-90869 New | WS WS_FTP Server Progress Software | 7.5 | Oct 29 | Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server |
| CVE-2026-90868 New | WS WS_FTP Server Progress Software | 9.9 | Oct 29 | OS Command Injection in Progress WS_FTP Server |
| CVE-2026-90867 New | WS WS_FTP Server Progress Software | 8.1 | Oct 29 | Improper Access Control of Web Admin Console in Progress WS_FTP Server |
| CVE-2026-90866 New | WS WS_FTP Server Progress Software | 9.1 | Oct 29 | Virtual Folder Path Confinement Bypass in Progress WS_FTP Server |
| CVE-2026-90865 New | WS WS_FTP Server Progress Software | 9.0 | Oct 29 | Command Injection via FTP Notification Variables in Progress WS_FTP Server |
| CVE-2026-90864 New | WS WS_FTP Server Progress Software | 9.1 | Oct 29 | Host Administrator Path Containment Bypass in Progress WS_FTP Server |
| CVE-2026-90863 New | WS WS_FTP Server Progress Software | 9.1 | Oct 29 | Privilege Escalation via Missing Authorization in WS_FTP Manager |
| CVE-2026-90862 New | WS WS_FTP Server Progress Software | 4.3 | Oct 29 | Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server |
| CVE-2026-90861 New | WS WS_FTP Server Progress Software | 6.6 | Oct 29 | Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server |
| CVE-2026-84296 New | WS WS_FTP Server Progress Software | 6.8 | Oct 29 | SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server |
| CVE-2026-84295 New | WS WS_FTP Server Progress Software | 10.0 | Oct 29 | Improper Authentication in Progress WS_FTP Server |
| CVE-2026-84294 New | WS WS_FTP Server Progress Software | 7.7 | Oct 29 | Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server |
| CVE-2026-118037 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing |
| CVE-2026-118036 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering |
| CVE-2026-118035 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing |
| CVE-2026-118040 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing |
| CVE-2026-118039 New | TD Telerik Document Processing Libraries Progress Software | 7.5 | Oct 28 | XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing |
| CVE-2026-118038 New | TD Telerik Document Processing Libraries Progress Software | 7.1 | Oct 28 | Path Traversal in Telerik Document Processing Libraries AI Agent Tools |
| CVE-2026-108116 | KU Kendo UI for jQuery Progress Software | 7.5 | Oct 15 | MDX and SOAP Injection in Kendo UI for jQuery |
| CVE-2026-106153 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar |
| CVE-2026-106151 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery |
| CVE-2026-106150 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip |
| CVE-2026-106149 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery Menu |
| CVE-2026-106148 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery |
| CVE-2026-106147 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery |
| CVE-2026-106161 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery |
| CVE-2026-106160 | KU Kendo UI for jQuery Progress Software | 5.4 | Oct 15 | Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery |
| CVE-2026-106159 | KU Kendo UI for jQuery Progress Software | 4.7 | Oct 15 | Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery |
| CVE-2026-106158 | KU Kendo UI for jQuery Progress Software | 4.7 | Oct 15 | Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery |
| CVE-2026-106157 | KU Kendo UI for jQuery Progress Software | 4.7 | Oct 15 | Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery |
| CVE-2026-106162 | KU Kendo UI for jQuery Progress Software | 4.7 | Oct 15 | Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery |
| CVE-2026-106163 | KU Kendo UI for jQuery Progress Software | 6.5 | Oct 15 | Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser |
| CVE-2026-106139 | KU Kendo UI for Vue Progress Software | 5.4 | Oct 10 | Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue |
| CVE-2026-106138 | KE KendoReact Progress Software | 5.4 | Oct 10 | Cross-Site Scripting via Chart Tooltip in KendoReact |
| CVE-2026-106155 | TR Telerik Report Server Progress Software | 8.9 | Oct 9 | Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers |
| CVE-2026-106145 | TR Telerik Report Server Progress Software | 7.1 | Oct 9 | Privilege Escalation in Telerik Report Server Service-Agent Hub |
| CVE-2026-106164 | TD Telerik Document Processing Libraries Progress Software | 7.3 | Oct 7 | Infinite Loop in Telerik Document Processing XLS Import |
| CVE-2026-91140 | AR Autonomous REST Connector GenAI Agents Progress Software | 9.6 | Oct 6 | OS command injection in Progress Software Autonomous REST Connector GenAI Agents |
| CVE-2026-92931 | PR @progress/sitefinity-nextjs-sdk Progress Software | 8.8 | Oct 5 | CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK |
| CVE-2026-77805 | PT Progress® Telerik® Fiddler® Classic Progress Software | 7.9 | Oct 5 | Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic |
| CVE-2026-77804 | PT Progress® Telerik® Fiddler® Classic Progress Software | 6.6 | Oct 5 | Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic |
| CVE-2026-77803 | PT Progress® Telerik® Fiddler® Classic Progress Software | 3.6 | Oct 5 | Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® Classic |
| CVE-2026-77802 | PT Progress® Telerik® Fiddler® Classic Progress Software | 6.3 | Oct 5 | HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® Classic |
| CVE-2026-86158 | PT Progress® Telerik® Fiddler® Everywhere Progress Software | 7.7 | Sep 29 | Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere |
| CVE-2026-86157 | PT Progress® Telerik® Fiddler® Everywhere Progress Software | 5.6 | Sep 29 | Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere |
| CVE-2026-80462 | CA Chef Automate Progress Software | 10.0 | Sep 11 | Privilege Escalation in Progress Chef Automate |
| CVE-2026-19219 | TU Telerik UI for ASP.NET AJAX Progress Software | 8.1 | Sep 2 | DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX |
| CVE-2026-18672 | TU Telerik UI for ASP.NET AJAX Progress Software | 7.5 | Sep 2 | RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX |
| CVE-2026-59690 | MW MOVEit WAF Progress Software | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API |
| CVE-2026-59689 | OS Object Scale Connection Manager Progress Software | 8.0 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root |
| CVE-2026-59688 | OS Object Scale Connection Manager Progress Software | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality |
| CVE-2026-59687 | EC ECS Connection Manager Progress Software | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface |
| CVE-2026-59686 | EC ECS Connection Manager Progress Software | 8.4 | Jul 27 | Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface |
| CVE-2026-14932 | TU Telerik UI for ASP.NET AJAX Progress Software | 6.5 | Jul 22 | Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart |
| CVE-2026-14865 | TU Telerik UI for ASP.NET AJAX Progress Software | 5.3 | Jul 22 | XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX |
| CVE-2026-13192 | TU Telerik UI for ASP.NET AJAX Progress Software | 6.5 | Jul 22 | RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX |
| CVE-2026-13190 | TU Telerik UI for ASP.NET AJAX Progress Software | 8.1 | Jul 22 | PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX |
