Security Digest
Progress: known exploited vulnerabilities
6 Progress CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-08-07 | CVE-2026-8037 | Progress LoadMaster Progress LoadMaster Command Injection Vulnerability | 2026-08-10 |
| 2025-03-03 | CVE-2024-4885 | Progress WhatsUp Gold Progress WhatsUp Gold Path Traversal Vulnerability | 2025-03-24 |
| 2024-11-18 | CVE-2024-1212 | Progress Kemp LoadMaster Progress Kemp LoadMaster OS Command Injection Vulnerability | 2024-12-09 |
| 2024-09-16 | CVE-2024-6670 | Progress WhatsUp Gold Progress WhatsUp Gold SQL Injection Vulnerability Ransomware | 2024-10-07 |
| 2024-06-13 | CVE-2024-4358 | Progress Telerik Report Server Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability | 2024-07-04 |
| 2023-10-05 | CVE-2023-40044 | Progress WS_FTP Server Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Ransomware | 2023-10-26 |