Skip to content

Progress Software · weakness class

Denial of Service

19 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 19 is a mark on the map. Named now: 1 to 19, most at risk first.

  1. WhatsUp Gold TestController Chart denial of service vulnerabilityCVE-2024-5011Progress Software Corporation · CVSS 7.5 · 47% likely

    CWE-400

  2. WhatsUp Gold InstallController Denial-of-Service VulnerabilityCVE-2024-5013Progress Software Corporation · CVSS 7.5 · 0.8% likely

    CWE-400

  3. Uncontrolled Resource Consumption in Telerik UI for ASP.NET Core Server-side AggregationCVE-2026-106156Progress Software · CVSS 8.6 · 0.6% likely

    CWE-400

  4. Memory leak in SFTP service can result in a denial of service in MOVEit TransferCVE-2026-10699Progress · CVSS 7.5 · 0.5% likely

    CWE-401

  5. AS2 module allows uncontrolled file uploadsCVE-2025-10932Progress · CVSS 8.2 · 0.5% likely

    CWE-400

  6. XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAXCVE-2026-14865Progress Software · CVSS 5.3 · 0.4% likely

    CWE-776

  7. Telerik Document Processing Improper Handling of Memory ResourcesCVE-2024-8049Progress Software · CVSS 6.5 · 0.4% likely

    CWE-834

  8. Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question AnsweringCVE-2026-118036Progress Software · CVSS 7.5 · 0.4% likely

    CWE-674

  9. Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationCVE-2026-8486Progress Software · CVSS 5.3 · 0.4% likely

    CWE-770

  10. Unauthenticated XFT Memory Exhaustion in Progress WS_FTP ServerCVE-2026-115339Progress Software · CVSS 7.5 · 0.4% likelycovered by CyberSIXT

    CWE-7701 article1 article this week: Progress fixes five WS_FTP Server flaws exposing sensitive data

  11. Uncontrolled Recursion in Telerik UI for ASP.NET Core FilterParserCVE-2026-106154Progress Software · CVSS 8.6 · 0.4% likely

    CWE-674

  12. Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit AutomationCVE-2026-8488Progress Software · CVSS 4.3 · 0.4% likely

    CWE-770

  13. Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit AutomationCVE-2026-8485Progress Software · CVSS 5.9 · 0.3% likely

    CWE-789

  14. Uncontrolled resource consumption of anonymous endpointsCVE-2024-7294Progress Software Corporation · CVSS 7.5 · 0.3% likely

    CWE-400

  15. Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessingCVE-2026-118035Progress Software · CVSS 7.5 · 0.3% likely

    CWE-674

  16. Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessingCVE-2026-118037Progress Software · CVSS 7.5 · 0.3% likely

    CWE-674

  17. Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-6022Progress Software · CVSS 7.5 · 0.3% likely

    CWE-400

  18. Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP ServerCVE-2026-90870Progress Software · CVSS 5.3 · 0.3% likely

    CWE-400

  19. Infinite Loop in Telerik Document Processing XLS ImportCVE-2026-106164Progress Software · CVSS 7.3 · 0.2% likely

    CWE-835

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in