Injection and Smuggling

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

1. A Bash script injection vulnerability exists in Kemp Load Master 7.1-16 and earlier due to a failure to sanitize input in the Web User Interface (WUI).CVE-2014-5287Progress · 8.0% likely

   CWE-74

2. In Progress OpenEdge OEM (OpenEdge Management) and OEE (OpenEdge Explorer) before 12.7, a remote user (who has any OEM or OEE role) could perform a URL injection attack to change…CVE-2023-34203Progress · 1.1% likely

   CWE-74

3. HTTP request smuggling in Progress MarkLogic ServerCVE-2026-9190Progress Software Corporation · CVSS 9.1 · 0.7% likely

   CWE-444

4. XML External Entity Processing Information DisclosureCVE-2024-4357Progress Software · CVSS 6.5 · 0.7% likely

   CWE-611

5. MOVEit Transfer LDAP injection in certificate-based authenticationCVE-2026-89071Progress · CVSS 7.5 · 0.5% likelycovered by CyberSIXT

   CWE-901 article

6. MOVEit Transfer Email MFA BypassCVE-2026-89074Progress · CVSS 7.5 · 0.5% likelycovered by CyberSIXT

   CWE-1761 article

7. Improper XML external entity restriction in Progress MarkLogic Server SAML processingCVE-2026-85957Progress Software Corporation · CVSS 7.5 · 0.4% likely

   CWE-611

8. XML External Entity (XXE) Injection in Telerik Reporting SVG ProcessingCVE-2026-118975Progress Software · CVSS 6.5 · 0.3% likely

   CWE-611

9. Improper XML external entity restriction in Progress MarkLogic ServerCVE-2026-85970Progress Software Corporation · CVSS 7.1 · 0.3% likely

   CWE-611

10. XML External Entity Reference in Telerik Document Processing Libraries SVG Image ProcessingCVE-2026-118039Progress Software · CVSS 7.5 · 0.3% likely

    CWE-611

11. MDX and SOAP Injection in Kendo UI for jQueryCVE-2026-108116Progress Software · CVSS 7.5 · 0.3% likely

    CWE-74

12. HTTP response splitting in Progress MarkLogic Server Query ConsoleCVE-2026-85976Progress Software Corporation · CVSS 5.4 · 0.1% likely

    CWE-113

13. HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® ClassicCVE-2026-77802Progress Software · CVSS 6.3 · 0.1% likely

    CWE-444

14. Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® ClassicCVE-2026-77803Progress Software · CVSS 3.6 · 0.1% likely

    CWE-444

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.