Cryptography

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

1. Telerik Fiddler v5.0.20182.28034 doesn't verify the hash of EnableLoopback.exe before running it, which could lead to code execution or local privilege escalation by replacing the…CVE-2019-12097Progress · 0.6% likely

   CWE-354

2. SAML authentication bypass in Progress MarkLogic ServerCVE-2026-7557Progress Software Corporation · CVSS 9.1 · 0.5% likely

   CWE-347

3. Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChartCVE-2026-14932Progress Software · CVSS 6.5 · 0.4% likely

   CWE-321

4. An issue was discovered in Progress DataDirect Connect for ODBC before 08.02.2770 for Oracle. When using Oracle Advanced Security (OAS) encryption, if an error is encountered init…CVE-2023-34363Progress · CVSS 5.9 · 0.3% likely

   CWE-338

5. Telerik Report Server Clear Text Transmission of Agent CommandsCVE-2025-0556Progress Software · CVSS 8.8 · 0.3% likely

   CWE-319

6. RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-13184Progress Software · CVSS 7.5 · 0.3% likely

   CWE-321

7. DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-19219Progress Software · CVSS 8.1 · 0.2% likely

   CWE-345

8. The Progress MOVEit Automation Configuration Export Function Uses a Cryptographic Method with Insufficient Bit LengthCVE-2024-4563Progress Software Corporation · CVSS 6.1 · 0.2% likely

   CWE-327

9. Cleartext transmission in Progress MarkLogic Server Amazon S3 connectionsCVE-2026-85975Progress Software Corporation · CVSS 7.5 · 0.2% likely

   CWE-319

10. Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-2878Progress Software · CVSS 5.3 · 0.2% likely

    CWE-331

11. Possibilities of IP Spoofing via X-Forwarded-For (XFF) HeaderCVE-2025-6504Progress Software · CVSS 8.4 · 0.2% likely

    CWE-345

12. Client connections using default TLS certificates from OpenEdge may bypass TLS host name validationCVE-2024-7346Progress · CVSS 7.2 · 0.2% likely

    CWE-297

13. DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-13188Progress Software · CVSS 5.9 · 0.2% likely

    CWE-345

14. Insecure XFT Transport in Progress WS_FTP ServerCVE-2026-115338Progress Software · CVSS 8.1 · 0.2% likelycovered by CyberSIXT

    CWE-3191 article1 article this week: Progress fixes five WS_FTP Server flaws exposing sensitive data

15. Cleartext transmission in Progress MarkLogic Server cluster join operationsCVE-2026-85973Progress Software Corporation · CVSS 7.4 · 0.1% likely

    CWE-319

16. Improper TLS hostname verification in Progress MarkLogic ServerCVE-2026-85974Progress Software Corporation · CVSS 7.4 · 0.1% likely

    CWE-297

17. Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessingCVE-2026-118040Progress Software · CVSS 7.5 · 0.1% likely

    CWE-347

18. Insecure Storage of Web Transfer Credentials in Progress WS_FTP ServerCVE-2026-115340Progress Software · CVSS 7.1 · 0.1% likelycovered by CyberSIXT

    CWE-3121 article1 article this week: Progress fixes five WS_FTP Server flaws exposing sensitive data

19. Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® ClassicCVE-2026-77805Progress Software · CVSS 7.9 · 0.1% likely

    CWE-347

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.