CyberSIXT Search
Vendor

Progress

CVEs tracked · all time
31
in CISA KEV · all time
1
articles · since 11 Sep
5
articles · all time
25

5 articles since 11 Sep.

Show as table
Progress: articles per day
Day (UTC)Articles
Sat 12 Sep1
Tue 6 Oct1
Mon 12 Oct1
Tue 13 Oct1
Fri 16 Oct1
See the full timeline
Products: Autonomous REST Connector GenAI Agents, Chef Automate, ECS Connection Manager, ECS Connections Manager and 8 more
Autonomous REST Connector GenAI AgentsChef AutomateECS Connection ManagerECS Connections ManagerLoadMasterMarkLogic ServerMOVEit AutomationMOVEit WAFObject Scale Connection ManagerShareFile Storage Zones ControllerSitefinityTelerik UI for ASP.NET AJAX

CVEs

31 CVEs
CVE-2026-8037Progress LoadMaster Command Injection VulnerabilityCVSS9.6CriticalExploited77%EPSS9articles
CVE-2026-89067MOVEit Transfer Secure Messaging Authentication BypassCVSS8.8High–Not in KEV0.5%EPSS1article
CVE-2026-87093MOVEit Transfer Service Directory Writable by Local Users Enables Local Privilege EscalationCVSS8.8High–Not in KEV0.2%EPSS1article
CVE-2026-89068MOVEit Transfer Authentication bypass in LDAP sign-onCVSS8.1High–Not in KEV0.5%EPSS1article
CVE-2026-89069MOVEit Transfer Stored XSS Vulnerability in Ad Hoc PackagesCVSS8.0High–Not in KEV0.4%EPSS1article
CVE-2026-89071MOVEit Transfer LDAP injection in certificate-based authenticationCVSS7.5High–Not in KEV0.5%EPSS1article
CVE-2026-89070MOVEit Transfer OIDC Authentication Replay VulnerabilityCVSS7.5High–Not in KEV0.4%EPSS1article
CVE-2026-85947Improper privilege management in Progress MarkLogic Server forest operationsCVSS9.9Critical–Not in KEV0.5%EPSS2articles
CVE-2026-85948Improper privilege management in Progress MarkLogic Server Management APICVSS9.9Critical–Not in KEV0.5%EPSS2articles
CVE-2026-85955Improper privilege management in Progress MarkLogic Server xdmp:eval-inCVSS9.9Critical–Not in KEV0.6%EPSS2articles
CVE-2026-9191Insufficient isolation of user-supplied code in Progress MarkLogic ServerCVSS9.6Critical–Not in KEV0.3%EPSS1article
CVE-2026-85956Improper privilege management in Progress MarkLogic Server backup and restore operationsCVSS9.6Critical–Not in KEV0.4%EPSS1article
19 more CVEs
CVE-2026-91140Progress Software Autonomous REST Connector GenAI Agents vulnerabilityCVSS9.6Critical–Not in KEV1.9%EPSS1article
CVE-2026-80462Progress Software Chef Automate vulnerabilityCVSS10.0Critical–Not in KEV2.0%EPSS1article
CVE-2026-13185Progress Software Telerik UI for ASP.NET AJAX vulnerabilityCVSS8.1High–Not in KEV0.7%EPSS0articles
CVE-2026-13181RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAXCVSS8.1High–Not in KEV0.7%EPSS1article
CVE-2026-13183RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAXCVSS7.5High–Not in KEV0.5%EPSS1article
CVE-2026-13182RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAXCVSS7.5High–Not in KEV0.5%EPSS1article
CVE-2026-7329Privilege escalation in Progress MarkLogic Server REST query interfacesCVSS9.9Critical–Not in KEV0.6%EPSS1article
CVE-2026-9192Authentication bypass in Progress MarkLogic Server ODBC App ServerCVSS9.8Critical–Not in KEV0.8%EPSS1article
CVE-2026-59686Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management InterfaceCVSS8.4High–Not in KEV1.7%EPSS0articles
CVE-2026-2699Progress ShareFile Storage Zones Controller vulnerabilityCVSS9.8Critical–Not in KEV58%EPSS4articles
CVE-2026-2701Progress ShareFile Storage Zones Controller vulnerabilityCVSS9.1Critical–Not in KEV55%EPSS4articles
CVE-2026-7312Progress Software Sitefinity vulnerabilityCVSS10.0Critical–Not in KEV0.6%EPSS1article
CVE-2026-7198Progress Software Sitefinity vulnerabilityCVSS9.8Critical–Not in KEV0.7%EPSS1article
CVE-2026-4670Progress Software MOVEit Automation vulnerabilityCVSS9.8Critical–Not in KEV0.6%EPSS3articles
CVE-2026-5174Progress Software MOVEit Automation vulnerabilityCVSS7.7High–Not in KEV0.5%EPSS2articles
CVE-2026-4048OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVSS8.4High–Not in KEV3.0%EPSS1article
CVE-2026-3518OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVSS8.4High–Not in KEV17%EPSS1article
CVE-2026-3519OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVSS8.4High–Not in KEV3.0%EPSS1article
CVE-2026-3517OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFCVSS8.4High–Not in KEV3.0%EPSS1article

Coverage

25 articles, all timeFull timeline RSS feed
  1. Progress Patches 12 High Severity Flaws in MOVEit TransferSecurityOnline
  2. MarkLogic flaws let low privilege accounts seize server admin controlThe Hacker News
  3. Progress fixes 31 MarkLogic flaws, including three rated 9.9 CRITICALSecurityOnline
  4. Progress fixes critical flaw letting malicious API specs hijack AI agentsSecurityOnline
  5. Critical Chef Automate Flaw Lets Attackers Seize Infrastructure ControlSecurityOnline
  6. Telerik UI Flaw Enables Unauthenticated IIS Server TakeoverThe Hacker News
  7. MarkLogic Server Security Bulletin Patches 10 Vulnerabilities, With CVSS Scores Up to 9.9SecurityOnline
  8. CISA urges patch Progress Kemp LoadMaster CVE-2026-8037 RCE flawSecurityWeek
  9. CISA flags exploited LoadMaster bug CVE-2026-8037, urges patchSecurity Affairs
  10. Metabase SQL Injection Zero-Day (CVSS 10) ExploitedSecurityOnline
  11. CISA Flags Progress LoadMaster Injection Flaw CVE-2026-8037CISA · official notice
  12. CISA Adds Critical LoadMaster Command Injection Flaw to KEV ListCISA · official notice
  13. Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security ConcernsSecurityWeek
  14. Weekly Threat Intelligence: The July 2026 BreachesSecurityOnline
  15. CVE-2026-8037: Progress Kemp LoadMaster RCE Exploited in the WildSOCRadar
  16. Kemp LoadMaster zero day RCE exploited PoC surfaces patch urgedSecurityOnline
  17. Check Point VPN, Kemp LoadMaster hit by CVE-2026-50751 exploitSecurityOnline
  18. Critical Sitefinity Vulnerabilities: CVSS 10.0 Security AlertSecurityOnline
  19. MOVEit Automation flaw CVE-2026-4670 forces rapid patch pushThe Hacker News
  20. Progress fixes MOVEit Automation flaws opening door to file hacksSecurity Affairs
  21. Progress patches critical MOVEit auth bypass, CVE-2026-4670The Hacker News
  22. Progress patches MOVEit WAF, LoadMaster command injection flawsSecurityWeek
  23. Critical ShareFile Flaws Lead to Unauthenticated RCESecurityWeek
  24. Preauth RCE chain targets Progress ShareFile Storage Zones 5.xSOCRadar
  25. ThreatsDay Bulletin: Pre-Auth Chains, Android Rootkits, CloudTrail Evasion & 10 More StoriesThe Hacker News · first in our coverage

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device