Progress Software vulnerabilities
285 CVEs and advisories name Progress Software as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-115340Insecure Storage of Web Transfer Credentials in Progress WS_FTP Server
- CVE-2026-115339Unauthenticated XFT Memory Exhaustion in Progress WS_FTP Server
- CVE-2026-115341Unauthorized File Disclosure via Path Traversal in Thin Client Web Transfer in Progress WS_FTP Server
- CVE-2026-115337Folder Permission Bypass in Progress WS_FTP Server
- CVE-2026-115336FTP Quota Accounting Bypass in Progress WS_FTP Server
- CVE-2026-115338Insecure XFT Transport in Progress WS_FTP Server
- CVE-2026-106128Prototype Pollution in Progress Software Kendo UI for Vue
- CVE-2026-106127Prototype Pollution in Progress Software KendoReact
- CVE-2026-106144Prototype Pollution in Progress Software Kendo UI for Angular
- CVE-2026-106143Cross-Site Scripting in Progress Software Kendo UI for Vue
- CVE-2026-106142Cross-Site Scripting in Progress Software KendoReact
- CVE-2026-106141Cross-Site Scripting in Progress Software Kendo UI for Angular
- CVE-2026-106136Cross-Site Scripting in Progress Software KendoReact
- CVE-2026-106134Cross-Site Scripting in Progress Software KendoReact
- CVE-2026-106135Cross-Site Scripting in Progress Software Kendo UI for Angular
- CVE-2026-104656Cross-site Scripting in Progress Telerik Fiddler Everywhere
- CVE-2026-104657Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill
- CVE-2026-90872Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server
- CVE-2026-90871Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server
- CVE-2026-90870Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server
- CVE-2026-90869Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server
- CVE-2026-90868OS Command Injection in Progress WS_FTP Server
- CVE-2026-90867Improper Access Control of Web Admin Console in Progress WS_FTP Server
- CVE-2026-90866Virtual Folder Path Confinement Bypass in Progress WS_FTP Server
- CVE-2026-90865Command Injection via FTP Notification Variables in Progress WS_FTP Server
- CVE-2026-90864Host Administrator Path Containment Bypass in Progress WS_FTP Server
- CVE-2026-90863Privilege Escalation via Missing Authorization in WS_FTP Manager
- CVE-2026-90862Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server
- CVE-2026-90861Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server
- CVE-2026-84296SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server