Progress Software vulnerabilities
285 CVEs and advisories name Progress Software as an affected vendor, 6 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-85968Out-of-bounds read in Progress MarkLogic Server
- CVE-2026-85967Cross-site scripting in Progress MarkLogic Server
- CVE-2026-85966Exposure of sensitive information in Progress MarkLogic Server
- CVE-2026-85965Use-after-free in Progress MarkLogic Server JavaScript engine integration
- CVE-2026-85964Path traversal in Progress MarkLogic Server Query Console
- CVE-2026-85963Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector
- CVE-2026-85962Improper authentication in Progress MarkLogic Server SAML processing
- CVE-2026-85961Sensitive information exposure in Progress MarkLogic Server Azure deployments
- CVE-2026-85960Cross-site request forgery in Progress MarkLogic Server Query Console
- CVE-2026-85959Insufficient authentication logging in Progress MarkLogic Server
- CVE-2026-85958Improper OAuth token validation in Progress MarkLogic Server
- CVE-2026-85957Improper XML external entity restriction in Progress MarkLogic Server SAML processing
- CVE-2026-85956Improper privilege management in Progress MarkLogic Server backup and restore operations
- CVE-2026-85955Improper privilege management in Progress MarkLogic Server xdmp:eval-in
- CVE-2026-85954Improper privilege management in Progress MarkLogic Server higher-order XQuery functions
- CVE-2026-85953Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio
- CVE-2026-85952Server-side request forgery in Progress MarkLogic Server Linux cloud deployments
- CVE-2026-85951Server-side request forgery in Progress MarkLogic Server Azure deployments
- CVE-2026-85950Improper privilege management in Progress MarkLogic Server REST extensions
- CVE-2026-85949Sensitive information exposure in Progress MarkLogic Server trace logs
- CVE-2026-85948Improper privilege management in Progress MarkLogic Server Management API
- CVE-2026-85947Improper privilege management in Progress MarkLogic Server forest operations
- CVE-2026-9191Insufficient isolation of user-supplied code in Progress MarkLogic Server
- CVE-2026-106139Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue
- CVE-2026-106138Cross-Site Scripting via Chart Tooltip in KendoReact
- CVE-2026-106155Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers
- CVE-2026-106145Privilege Escalation in Telerik Report Server Service-Agent Hub
- CVE-2026-106164Infinite Loop in Telerik Document Processing XLS Import
- CVE-2026-91140OS command injection in Progress Software Autonomous REST Connector GenAI Agents
- CVE-2026-92931CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK