---
title: "Progress: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/progress/
description: "Every Progress vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (6), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-08-07
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Progress: known exploited vulnerabilities

- 2026-08-07 [CVE-2026-8037](https://erroneo.us/security/cve/CVE-2026-8037/index.md) Progress LoadMaster: Progress LoadMaster Command Injection Vulnerability (due 2026-08-10; ransomware: Unknown)
- 2025-03-03 [CVE-2024-4885](https://erroneo.us/security/cve/CVE-2024-4885/index.md) Progress WhatsUp Gold: Progress WhatsUp Gold Path Traversal Vulnerability (due 2025-03-24; ransomware: Unknown)
- 2024-11-18 [CVE-2024-1212](https://erroneo.us/security/cve/CVE-2024-1212/index.md) Progress Kemp LoadMaster: Progress Kemp LoadMaster OS Command Injection Vulnerability (due 2024-12-09; ransomware: Unknown)
- 2024-09-16 [CVE-2024-6670](https://erroneo.us/security/cve/CVE-2024-6670/index.md) Progress WhatsUp Gold: Progress WhatsUp Gold SQL Injection Vulnerability (due 2024-10-07; ransomware: Known)
- 2024-06-13 [CVE-2024-4358](https://erroneo.us/security/cve/CVE-2024-4358/index.md) Progress Telerik Report Server: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability (due 2024-07-04; ransomware: Unknown)
- 2023-10-05 [CVE-2023-40044](https://erroneo.us/security/cve/CVE-2023-40044/index.md) Progress WS_FTP Server: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability (due 2023-10-26; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/progress/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt