{"items":[{"id":"CVE-2026-90872","published":"2026-10-29T15:57:24.826Z","updated":"2026-10-30T17:18:24.148Z","title":"Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server","severity":"MEDIUM","score":6.6,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-90871","published":"2026-10-29T15:56:34.762Z","updated":"2026-10-30T17:15:33.651Z","title":"Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2026-90870","published":"2026-10-29T15:55:43.950Z","updated":"2026-10-30T17:15:05.940Z","title":"Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.0027,"kevAdded":null},{"id":"CVE-2026-90869","published":"2026-10-29T15:54:48.769Z","updated":"2026-10-30T17:14:35.864Z","title":"Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00356,"kevAdded":null},{"id":"CVE-2026-90868","published":"2026-10-29T15:53:59.315Z","updated":"2026-10-30T17:18:24.284Z","title":"OS Command Injection in Progress WS_FTP Server","severity":"CRITICAL","score":9.9,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.01493,"kevAdded":null},{"id":"CVE-2026-90867","published":"2026-10-29T15:53:12.203Z","updated":"2026-10-30T17:18:24.424Z","title":"Improper Access Control of Web Admin Console in Progress WS_FTP Server","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00403,"kevAdded":null},{"id":"CVE-2026-90866","published":"2026-10-29T15:52:24.790Z","updated":"2026-10-30T17:18:24.557Z","title":"Virtual Folder Path Confinement Bypass in Progress WS_FTP Server","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.0073,"kevAdded":null},{"id":"CVE-2026-90865","published":"2026-10-29T15:51:35.058Z","updated":"2026-10-30T17:18:24.861Z","title":"Command Injection via FTP Notification Variables in Progress WS_FTP Server","severity":"CRITICAL","score":9,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.01143,"kevAdded":null},{"id":"CVE-2026-90864","published":"2026-10-29T15:50:29.084Z","updated":"2026-10-30T17:18:24.999Z","title":"Host Administrator Path Containment Bypass in Progress WS_FTP Server","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00479,"kevAdded":null},{"id":"CVE-2026-90863","published":"2026-10-29T15:49:34.111Z","updated":"2026-10-30T17:18:25.132Z","title":"Privilege Escalation via Missing Authorization in WS_FTP Manager","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00656,"kevAdded":null},{"id":"CVE-2026-90862","published":"2026-10-29T15:48:42.885Z","updated":"2026-10-30T17:14:03.885Z","title":"Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server","severity":"MEDIUM","score":4.3,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2026-90861","published":"2026-10-29T15:47:45.075Z","updated":"2026-10-30T17:18:25.273Z","title":"Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server","severity":"MEDIUM","score":6.6,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00305,"kevAdded":null},{"id":"CVE-2026-84296","published":"2026-10-29T15:46:44.924Z","updated":"2026-10-30T17:18:25.411Z","title":"SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server","severity":"MEDIUM","score":6.8,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00339,"kevAdded":null},{"id":"CVE-2026-84295","published":"2026-10-29T15:45:08.601Z","updated":"2026-10-30T17:18:25.542Z","title":"Improper Authentication in Progress WS_FTP Server","severity":"CRITICAL","score":10,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00553,"kevAdded":null},{"id":"CVE-2026-84294","published":"2026-10-29T15:42:44.195Z","updated":"2026-11-05T21:24:50.218Z","title":"Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server","severity":"HIGH","score":7.7,"vendor":"Progress Software","product":"WS_FTP Server","kev":false,"epss":0.00352,"kevAdded":null},{"id":"CVE-2026-118037","published":"2026-10-28T12:34:09.534Z","updated":"2026-10-28T12:34:09.534Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadSpreadProcessing and RadSpreadStreamProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00274,"kevAdded":null},{"id":"CVE-2026-118036","published":"2026-10-28T12:33:04.373Z","updated":"2026-10-28T12:33:04.373Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadPdfProcessing and AI Document Summarization and Question Answering","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2026-118035","published":"2026-10-28T12:31:56.249Z","updated":"2026-10-28T12:31:56.249Z","title":"Uncontrolled Resource Consumption in Telerik Document Processing Libraries RadWordsProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00292,"kevAdded":null},{"id":"CVE-2026-118040","published":"2026-10-28T12:30:41.623Z","updated":"2026-10-28T12:30:41.623Z","title":"Improper Signature and Certificate Validation in Telerik Document Processing Libraries RadPdfProcessing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00089,"kevAdded":null},{"id":"CVE-2026-118039","published":"2026-10-28T12:29:35.667Z","updated":"2026-10-28T12:29:35.667Z","title":"XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2026-118038","published":"2026-10-28T12:27:47.560Z","updated":"2026-10-28T12:27:47.560Z","title":"Path Traversal in Telerik Document Processing Libraries AI Agent Tools","severity":"HIGH","score":7.1,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2026-108116","published":"2026-10-15T14:12:52.017Z","updated":"2026-10-15T18:11:50.463Z","title":"MDX and SOAP Injection in Kendo UI for jQuery","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-106153","published":"2026-10-15T14:12:05.941Z","updated":"2026-10-15T18:24:48.793Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery Calendar and MultiViewCalendar","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2026-106151","published":"2026-10-15T14:11:08.537Z","updated":"2026-10-15T18:12:49.751Z","title":"Cross-Site Scripting in Validator Validation Messages in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2026-106150","published":"2026-10-15T14:09:50.330Z","updated":"2026-10-15T18:13:16.731Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery Splitter, Window, and Tooltip","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2026-106149","published":"2026-10-15T14:08:43.628Z","updated":"2026-10-15T18:13:44.008Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery Menu","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2026-106148","published":"2026-10-15T13:28:22.551Z","updated":"2026-10-15T18:16:24.215Z","title":"Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2026-106147","published":"2026-10-15T13:27:32.243Z","updated":"2026-10-15T18:08:12.892Z","title":"Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2026-106161","published":"2026-10-15T13:26:57.635Z","updated":"2026-10-15T18:25:52.553Z","title":"Cross-Site Scripting via Badge Text Binding in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00178,"kevAdded":null},{"id":"CVE-2026-106160","published":"2026-10-15T13:24:33.068Z","updated":"2026-10-15T18:26:30.515Z","title":"Prototype Pollution via Model.accept and kendo.setter in Kendo UI for jQuery","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00192,"kevAdded":null},{"id":"CVE-2026-106159","published":"2026-10-15T13:23:40.132Z","updated":"2026-10-15T18:26:53.924Z","title":"Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-106158","published":"2026-10-15T13:22:44.197Z","updated":"2026-10-15T18:29:15.316Z","title":"Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-106157","published":"2026-10-15T13:21:27.532Z","updated":"2026-10-15T18:29:35.947Z","title":"Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00168,"kevAdded":null},{"id":"CVE-2026-106162","published":"2026-10-15T13:20:11.331Z","updated":"2026-10-15T18:30:23.198Z","title":"Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQuery","severity":"MEDIUM","score":4.7,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-106163","published":"2026-10-15T13:18:53.367Z","updated":"2026-10-15T18:30:45.142Z","title":"Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowser","severity":"MEDIUM","score":6.5,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00181,"kevAdded":null},{"id":"CVE-2026-106139","published":"2026-10-10T09:23:48.755Z","updated":"2026-10-15T18:18:16.714Z","title":"Cross-Site Scripting via Chart Tooltip in Kendo UI for Vue","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for Vue","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-106138","published":"2026-10-10T09:23:05.665Z","updated":"2026-10-15T18:17:56.079Z","title":"Cross-Site Scripting via Chart Tooltip in KendoReact","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"KendoReact","kev":false,"epss":0.00133,"kevAdded":null},{"id":"CVE-2026-106155","published":"2026-10-09T07:07:57.817Z","updated":"2026-10-09T18:03:02.317Z","title":"Stored Cross-site Scripting (XSS) in Telerik Report Server Web Report Viewers","severity":"HIGH","score":8.9,"vendor":"Progress Software","product":"Telerik Report Server","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2026-106145","published":"2026-10-09T07:03:34.351Z","updated":"2026-10-09T18:03:22.258Z","title":"Privilege Escalation in Telerik Report Server Service-Agent Hub","severity":"HIGH","score":7.1,"vendor":"Progress Software","product":"Telerik Report Server","kev":false,"epss":0.00145,"kevAdded":null},{"id":"CVE-2026-106164","published":"2026-10-07T18:02:32.641Z","updated":"2026-10-07T19:23:45.883Z","title":"Infinite Loop in Telerik Document Processing XLS Import","severity":"HIGH","score":7.3,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00186,"kevAdded":null},{"id":"CVE-2026-91140","published":"2026-10-06T13:46:11.357Z","updated":"2026-10-07T03:55:20.033Z","title":"OS command injection in Progress Software Autonomous REST Connector GenAI Agents","severity":"CRITICAL","score":9.6,"vendor":"Progress Software","product":"Autonomous REST Connector GenAI Agents","kev":false,"epss":0.02046,"kevAdded":null},{"id":"CVE-2026-92931","published":"2026-10-05T13:06:02.081Z","updated":"2026-10-06T17:48:45.628Z","title":"CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"@progress/sitefinity-nextjs-sdk","kev":false,"epss":0.00263,"kevAdded":null},{"id":"CVE-2026-77805","published":"2026-10-05T12:40:57.524Z","updated":"2026-10-05T15:26:04.778Z","title":"Weak Executable Signature Verification Vulnerability in Progress® Telerik® Fiddler® Classic","severity":"HIGH","score":7.9,"vendor":"Progress Software","product":"Progress® Telerik® Fiddler® Classic","kev":false,"epss":0.00068,"kevAdded":null},{"id":"CVE-2026-77804","published":"2026-10-05T12:40:26.811Z","updated":"2026-10-06T17:49:23.338Z","title":"Time-of-check Time-of-use (TOCTOU) Race Condition in Root Certificate Installation in Progress® Telerik® Fiddler® Classic","severity":"MEDIUM","score":6.6,"vendor":"Progress Software","product":"Progress® Telerik® Fiddler® Classic","kev":false,"epss":0.00066,"kevAdded":null},{"id":"CVE-2026-77803","published":"2026-10-05T12:39:36.806Z","updated":"2026-10-06T17:50:34.935Z","title":"Front-end Desynchronization Vulnerability in Progress® Telerik® Fiddler® Classic","severity":"LOW","score":3.6,"vendor":"Progress Software","product":"Progress® Telerik® Fiddler® Classic","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2026-77802","published":"2026-10-05T12:38:58.912Z","updated":"2026-10-06T17:51:15.128Z","title":"HTTP Request Smuggling Vulnerability in Progress® Telerik® Fiddler® Classic","severity":"MEDIUM","score":6.3,"vendor":"Progress Software","product":"Progress® Telerik® Fiddler® Classic","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2026-86158","published":"2026-09-29T06:34:24.264Z","updated":"2026-09-30T15:28:20.211Z","title":"Missing Authentication in the local .NET backend of Progress Telerik Fiddler Everywhere","severity":"HIGH","score":7.7,"vendor":"Progress Software","product":"Progress® Telerik® Fiddler® Everywhere","kev":false,"epss":0.00087,"kevAdded":null},{"id":"CVE-2026-86157","published":"2026-09-29T06:34:17.555Z","updated":"2026-09-30T15:28:20.346Z","title":"Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere","severity":"MEDIUM","score":5.6,"vendor":"Progress Software","product":"Progress® Telerik® Fiddler® Everywhere","kev":false,"epss":0.00119,"kevAdded":null},{"id":"CVE-2026-80462","published":"2026-09-11T12:28:49.216Z","updated":"2026-09-18T12:04:29.296Z","title":"Privilege Escalation in Progress Chef Automate","severity":"CRITICAL","score":10,"vendor":"Progress Software","product":"Chef Automate","kev":false,"epss":0.02006,"kevAdded":null},{"id":"CVE-2026-19219","published":"2026-09-02T10:35:51.840Z","updated":"2026-09-03T03:56:09.596Z","title":"DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2026-18672","published":"2026-09-02T10:31:43.100Z","updated":"2026-09-02T10:42:56.527Z","title":"RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00503,"kevAdded":null},{"id":"CVE-2026-59690","published":"2026-07-27T12:26:27.980Z","updated":"2026-07-28T03:55:33.063Z","title":"Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant Missing Authorization Allows Privilege Escalation via REST API","severity":"HIGH","score":8,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2026-59689","published":"2026-07-27T12:25:22.245Z","updated":"2026-07-28T03:55:34.119Z","title":"Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF Improper Authorization Allows Privilege Escalation to Root","severity":"HIGH","score":8,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.00257,"kevAdded":null},{"id":"CVE-2026-59688","published":"2026-07-27T12:24:23.139Z","updated":"2026-07-28T03:55:34.913Z","title":"Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Backup Restore Functionality","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.01677,"kevAdded":null},{"id":"CVE-2026-59687","published":"2026-07-27T12:23:15.683Z","updated":"2026-07-28T03:55:35.706Z","title":"Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Geo Location Management Interface","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.01677,"kevAdded":null},{"id":"CVE-2026-59686","published":"2026-07-27T12:22:05.699Z","updated":"2026-07-28T03:55:37.387Z","title":"Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF OS Command Injection via Management Interface","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.01677,"kevAdded":null},{"id":"CVE-2026-14932","published":"2026-07-22T13:46:45.714Z","updated":"2026-07-22T19:09:34.640Z","title":"Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart","severity":"MEDIUM","score":6.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00353,"kevAdded":null},{"id":"CVE-2026-14865","published":"2026-07-22T13:45:21.227Z","updated":"2026-07-22T19:10:08.695Z","title":"XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP.NET AJAX","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00432,"kevAdded":null},{"id":"CVE-2026-13192","published":"2026-07-22T13:44:14.027Z","updated":"2026-07-22T19:10:33.166Z","title":"RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX","severity":"MEDIUM","score":6.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00419,"kevAdded":null},{"id":"CVE-2026-13190","published":"2026-07-22T13:43:12.374Z","updated":"2026-07-24T03:56:04.216Z","title":"PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00504,"kevAdded":null},{"id":"CVE-2026-13189","published":"2026-07-22T13:42:19.375Z","updated":"2026-07-22T19:11:54.445Z","title":"SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-13188","published":"2026-07-22T13:41:29.942Z","updated":"2026-07-22T19:12:15.521Z","title":"DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX","severity":"MEDIUM","score":5.9,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2026-13187","published":"2026-07-22T13:40:21.443Z","updated":"2026-07-24T03:56:03.170Z","title":"DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2026-13186","published":"2026-07-22T13:39:14.908Z","updated":"2026-07-24T03:56:01.638Z","title":"AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2026-13185","published":"2026-07-22T13:38:17.195Z","updated":"2026-07-24T03:56:00.738Z","title":"PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00667,"kevAdded":null},{"id":"CVE-2026-13184","published":"2026-07-22T13:37:11.804Z","updated":"2026-07-22T19:14:27.027Z","title":"RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00306,"kevAdded":null},{"id":"CVE-2026-13183","published":"2026-07-22T13:36:08.274Z","updated":"2026-07-22T19:15:06.321Z","title":"RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00498,"kevAdded":null},{"id":"CVE-2026-13182","published":"2026-07-22T13:34:57.272Z","updated":"2026-07-22T19:14:47.505Z","title":"RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00498,"kevAdded":null},{"id":"CVE-2026-13181","published":"2026-07-22T13:33:18.348Z","updated":"2026-07-24T03:55:59.737Z","title":"RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00732,"kevAdded":null},{"id":"CVE-2026-8079","published":"2026-07-02T14:03:36.018Z","updated":"2026-07-03T03:56:03.186Z","title":"Unintended limited set of actions with elevated privileges may be performed during PDF generation in Progress Flowmon","severity":"HIGH","score":8.7,"vendor":"Progress Software","product":"Flowmon","kev":false,"epss":0.00323,"kevAdded":null},{"id":"CVE-2026-9272","published":"2026-07-02T14:02:51.273Z","updated":"2026-07-03T03:56:00.966Z","title":"Possibility of unintended database operations when querying data related to detected anomalies in Progress Flowmon ADS","severity":"HIGH","score":8.7,"vendor":"Progress Software","product":"Flowmon ADS","kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2026-8037","published":"2026-06-04T13:13:45.793Z","updated":"2026-10-15T13:20:45.089Z","title":"OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF","severity":"CRITICAL","score":9.6,"vendor":"Progress Software","product":"LoadMaster","kev":true,"epss":0.99794,"kevAdded":"2026-08-07"},{"id":"CVE-2026-7313","published":"2026-06-02T13:09:46.916Z","updated":"2026-06-03T03:55:41.806Z","title":"CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity","severity":"HIGH","score":8.7,"vendor":"Progress Software","product":"Sitefinity","kev":false,"epss":0.00319,"kevAdded":null},{"id":"CVE-2026-7312","published":"2026-06-02T13:09:06.250Z","updated":"2026-11-03T22:13:31.764Z","title":"CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity","severity":"CRITICAL","score":10,"vendor":"Progress Software","product":"Sitefinity","kev":false,"epss":0.00441,"kevAdded":null},{"id":"CVE-2026-7201","published":"2026-06-02T13:07:36.875Z","updated":"2026-06-02T15:12:26.494Z","title":"CWE-639: Authorization Bypass Through User-Controlled Key in web services in Progress Sitefinity","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"Sitefinity","kev":false,"epss":0.00348,"kevAdded":null},{"id":"CVE-2026-7198","published":"2026-06-02T13:06:32.425Z","updated":"2026-06-03T03:55:44.089Z","title":"CWE-284: Improper Access Control in web services in Progress Sitefinity","severity":"CRITICAL","score":9.8,"vendor":"Progress Software","product":"Sitefinity","kev":false,"epss":0.00443,"kevAdded":null},{"id":"CVE-2026-7195","published":"2026-06-02T13:04:40.341Z","updated":"2026-06-04T03:55:42.274Z","title":"CWE-20: Improper Input Validation in web services in Progress Sitefinity","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"Sitefinity","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2026-8488","published":"2026-05-20T14:14:54.861Z","updated":"2026-05-20T15:29:52.391Z","title":"Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation","severity":"MEDIUM","score":4.3,"vendor":"Progress Software","product":"MOVEit Automation","kev":false,"epss":0.00364,"kevAdded":null},{"id":"CVE-2026-8487","published":"2026-05-20T14:12:03.406Z","updated":"2026-05-20T15:30:11.664Z","title":"Incorrect default permissions vulnerability in Progress Software MOVEit Automation","severity":"MEDIUM","score":6.5,"vendor":"Progress Software","product":"MOVEit Automation","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2026-8486","published":"2026-05-20T14:11:30.771Z","updated":"2026-05-20T15:30:29.106Z","title":"Allocation of resources without limits or throttling vulnerability in Progress Software MOVEit Automation","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"MOVEit Automation","kev":false,"epss":0.00395,"kevAdded":null},{"id":"CVE-2026-8485","published":"2026-05-20T14:06:57.546Z","updated":"2026-05-20T14:24:51.862Z","title":"Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation","severity":"MEDIUM","score":5.9,"vendor":"Progress Software","product":"MOVEit Automation","kev":false,"epss":0.00348,"kevAdded":null},{"id":"CVE-2026-5174","published":"2026-04-30T15:07:21.589Z","updated":"2026-05-01T15:24:46.453Z","title":"Improper Access Control Vulnerability in Progress MOVEit Automation","severity":"HIGH","score":7.7,"vendor":"Progress Software","product":"MOVEit Automation","kev":false,"epss":0.03321,"kevAdded":null},{"id":"CVE-2026-4670","published":"2026-04-30T15:06:11.600Z","updated":"2026-05-01T03:55:57.784Z","title":"Improper Authentication vulnerability in Progress MOVEit Automation","severity":"CRITICAL","score":9.8,"vendor":"Progress Software","product":"MOVEit Automation","kev":false,"epss":0.0504,"kevAdded":null},{"id":"CVE-2026-6023","published":"2026-04-22T07:13:07.933Z","updated":"2026-04-23T03:56:12.523Z","title":"Deserialization of Untrusted Data Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.0054,"kevAdded":null},{"id":"CVE-2026-6022","published":"2026-04-22T07:07:30.795Z","updated":"2026-04-22T12:28:18.218Z","title":"Uncontrolled Resource Consumption Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00288,"kevAdded":null},{"id":"CVE-2026-4048","published":"2026-04-20T13:36:49.475Z","updated":"2026-04-22T03:55:54.495Z","title":"OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.02132,"kevAdded":null},{"id":"CVE-2026-3519","published":"2026-04-20T13:32:50.259Z","updated":"2026-04-22T03:55:53.355Z","title":"OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.02134,"kevAdded":null},{"id":"CVE-2026-3518","published":"2026-04-20T13:29:33.794Z","updated":"2026-04-22T03:55:52.242Z","title":"OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.16877,"kevAdded":null},{"id":"CVE-2026-3517","published":"2026-04-20T13:22:54.867Z","updated":"2026-04-22T03:55:51.123Z","title":"OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.15488,"kevAdded":null},{"id":"CVE-2026-2737","published":"2026-04-02T13:28:41.825Z","updated":"2026-04-03T03:55:29.158Z","title":"Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon web application","severity":"HIGH","score":8.5,"vendor":"Progress Software","product":"Flowmon","kev":false,"epss":0.00199,"kevAdded":null},{"id":"CVE-2026-3692","published":"2026-04-02T13:27:45.684Z","updated":"2026-04-03T03:55:27.668Z","title":"Unintended command execution during report generation in Progress Flowmon","severity":"HIGH","score":8.7,"vendor":"Progress Software","product":"Flowmon","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-2514","published":"2026-03-12T13:00:27.353Z","updated":"2026-03-13T03:55:43.039Z","title":"Possibility of unintended actions when viewing maliciously crafted network data in Progress Flowmon ADS web application","severity":"HIGH","score":8.6,"vendor":"Progress Software","product":"Flowmon ADS","kev":false,"epss":0.0018,"kevAdded":null},{"id":"CVE-2026-2513","published":"2026-03-12T12:58:59.894Z","updated":"2026-03-13T03:55:42.297Z","title":"Possibility of unintended actions when an administrator clicks a malicious link in the Progress Flowmon ADS web application","severity":"HIGH","score":8.6,"vendor":"Progress Software","product":"Flowmon ADS","kev":false,"epss":0.0017,"kevAdded":null},{"id":"CVE-2026-2878","published":"2026-02-25T14:45:11.142Z","updated":"2026-02-27T17:06:16.616Z","title":"Insufficient Entropy Vulnerability in Telerik UI for ASP.NET AJAX","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.00211,"kevAdded":null},{"id":"CVE-2025-6723","published":"2026-01-30T14:09:41.182Z","updated":"2026-03-11T14:30:44.870Z","title":"Untrusted user data can lead to privilege escalation","severity":"MEDIUM","score":5.8,"vendor":"Progress Software","product":"Chef Inspec","kev":false,"epss":0.00132,"kevAdded":null},{"id":"CVE-2025-13447","published":"2026-01-13T14:31:56.911Z","updated":"2026-02-26T15:04:45.811Z","title":"OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.27217,"kevAdded":null},{"id":"CVE-2025-13444","published":"2026-01-13T14:26:50.661Z","updated":"2026-02-26T15:04:46.116Z","title":"OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.27217,"kevAdded":null},{"id":"CVE-2025-13774","published":"2026-01-13T12:59:51.775Z","updated":"2026-02-26T15:04:47.323Z","title":"SQL injection leading to privilege escalation in Progress Flowmon ADS","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"Flowmon ADS","kev":false,"epss":0.0046,"kevAdded":null},{"id":"CVE-2025-11906","published":"2025-10-30T07:39:38.530Z","updated":"2026-02-26T16:56:53.026Z","title":"Privilege escalation via writable configuration files in Progress Flowmon","severity":"MEDIUM","score":6.7,"vendor":"Progress Software","product":"Flowmon","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2025-10240","published":"2025-10-09T12:43:40.906Z","updated":"2026-02-26T17:47:58.397Z","title":"Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"Flowmon","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2025-10239","published":"2025-10-09T12:42:05.557Z","updated":"2026-02-26T17:47:58.934Z","title":"Unintended command execution via troubleshooting scripts in Progress Flowmon","severity":"HIGH","score":7.2,"vendor":"Progress Software","product":"Flowmon","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2025-8868","published":"2025-09-29T11:29:50.463Z","updated":"2025-09-29T12:55:02.884Z","title":"Chef Automate compliance service SQL Injection Vulnerability","severity":"CRITICAL","score":9.8,"vendor":"Progress Software","product":"Chef Automate","kev":false,"epss":0.25948,"kevAdded":null},{"id":"CVE-2025-6724","published":"2025-09-29T11:29:42.695Z","updated":"2025-09-29T13:02:01.775Z","title":"Chef Automate SQL Injection Vulnerability","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"Chef Automate","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2025-6505","published":"2025-07-29T12:56:57.219Z","updated":"2025-07-29T13:25:19.719Z","title":"Unauthorized access and impersonation can occur in versions 4.6.2.3226 and below of Progress Software's Hybrid Data Pipeline Server on Linux. This…","severity":"HIGH","score":8.1,"vendor":"Progress Software","product":"Hybrid Data Pipeline","kev":false,"epss":0.0039,"kevAdded":null},{"id":"CVE-2025-6504","published":"2025-07-29T12:56:28.054Z","updated":"2025-07-29T13:27:02.851Z","title":"Possibilities of IP Spoofing via X-Forwarded-For (XFF) Header","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"Hybrid Data Pipeline","kev":false,"epss":0.00204,"kevAdded":null},{"id":"CVE-2025-6725","published":"2025-07-02T14:39:15.442Z","updated":"2025-07-02T14:54:14.971Z","title":"Cross-Site Scripting (XSS) in PdfViewer","severity":"MEDIUM","score":5.4,"vendor":"Progress Software","product":"Kendo UI for jQuery","kev":false,"epss":0.00272,"kevAdded":null},{"id":"CVE-2025-3600","published":"2025-05-14T13:21:40.770Z","updated":"2025-08-27T14:54:22.319Z","title":"Unsafe Reflection Vulnerability in Telerik UI for ASP.NET AJAX","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"Telerik UI for ASP.NET AJAX","kev":false,"epss":0.26268,"kevAdded":null},{"id":"CVE-2024-11629","published":"2025-02-12T16:21:52.058Z","updated":"2025-02-12T19:05:31.058Z","title":"Telerik Document Processing RTF Export of Arbitrary File Path","severity":"HIGH","score":7.1,"vendor":"Progress Software","product":"Progress® Telerik® Document Processing Libraries","kev":false,"epss":0.00384,"kevAdded":null},{"id":"CVE-2024-11628","published":"2025-02-12T16:17:38.869Z","updated":"2025-02-12T19:06:31.802Z","title":"Prototype Pollution in Progress® Telerik® Kendo UI for Vue","severity":"MEDIUM","score":4.1,"vendor":"Progress Software","product":"Progress® Telerik® Kendo UI for Vue","kev":false,"epss":0.0069,"kevAdded":null},{"id":"CVE-2024-11343","published":"2025-02-12T15:46:49.360Z","updated":"2025-02-12T19:09:39.955Z","title":"Telerik Document Processing Path Traversal","severity":"HIGH","score":8.3,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.00671,"kevAdded":null},{"id":"CVE-2024-12629","published":"2025-02-12T15:37:51.840Z","updated":"2025-02-12T15:55:43.633Z","title":"Prototype Pollution in Progress® Telerik® KendoReact","severity":"MEDIUM","score":4.1,"vendor":"Progress Software","product":"Telerik KendoReact","kev":false,"epss":0.0069,"kevAdded":null},{"id":"CVE-2025-0332","published":"2025-02-12T15:15:31.166Z","updated":"2025-02-12T15:31:36.602Z","title":"Progress UI for WinForms decompression path traversal vulnerability","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Progress® Telerik® UI for WinForms","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2025-0556","published":"2025-02-12T15:11:03.067Z","updated":"2025-02-12T15:33:35.788Z","title":"Telerik Report Server Clear Text Transmission of Agent Commands","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"Telerik Report Server","kev":false,"epss":0.00309,"kevAdded":null},{"id":"CVE-2024-12251","published":"2025-02-12T15:09:46.306Z","updated":"2026-05-08T20:18:38.291Z","title":"Improper neutralization special element in hyperlinks","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik UI for WinUI","kev":false,"epss":0.00521,"kevAdded":null},{"id":"CVE-2024-10095","published":"2024-12-16T16:59:25.572Z","updated":"2024-12-16T17:26:03.808Z","title":"Progress UI for WPF format provider unsafe deserialization vulnerability","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"Telerik UI for WPF","kev":false,"epss":0.0075,"kevAdded":null},{"id":"CVE-2024-8049","published":"2024-11-13T15:20:32.209Z","updated":"2024-11-13T18:28:20.575Z","title":"Telerik Document Processing Improper Handling of Memory Resources","severity":"MEDIUM","score":6.5,"vendor":"Progress Software","product":"Telerik Document Processing Libraries","kev":false,"epss":0.0043,"kevAdded":null},{"id":"CVE-2024-10012","published":"2024-11-13T15:19:06.329Z","updated":"2024-11-13T19:34:56.312Z","title":"Progress UI for WPF format provider unsafe deserialization vulnerability","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik UI for WPF","kev":false,"epss":0.00228,"kevAdded":null},{"id":"CVE-2024-10013","published":"2024-11-13T15:17:07.237Z","updated":"2024-11-13T19:43:38.067Z","title":"Progress UI for WinForms format provider unsafe deserialization vulnerability","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik UI for WinForms","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2024-8015","published":"2024-10-09T14:49:19.603Z","updated":"2024-10-09T16:06:49.209Z","title":"Telerik Report Server Insecure Type Resolution","severity":"CRITICAL","score":9.1,"vendor":"Progress Software","product":"Telerik Reporting","kev":false,"epss":0.00823,"kevAdded":null},{"id":"CVE-2024-7840","published":"2024-10-09T14:41:40.048Z","updated":"2025-11-03T19:34:43.663Z","title":"Improper neutralization special element in hyperlinks","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik Reporting","kev":false,"epss":0.00664,"kevAdded":null},{"id":"CVE-2024-8048","published":"2024-10-09T14:18:56.968Z","updated":"2025-11-03T19:34:46.500Z","title":"Telerik Reporting Insecure Expression Evaluation","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik Reporting","kev":false,"epss":0.00222,"kevAdded":null},{"id":"CVE-2024-8014","published":"2024-10-09T14:16:33.764Z","updated":"2025-11-03T19:34:45.119Z","title":"Telerik Reporting EntityDataSource Insecure Type Resolution","severity":"HIGH","score":8.8,"vendor":"Progress Software","product":"Telerik Reporting","kev":false,"epss":0.00624,"kevAdded":null},{"id":"CVE-2024-8316","published":"2024-09-25T13:59:20.369Z","updated":"2024-09-25T14:16:14.295Z","title":"Progress UI for WPF format provider unsafe deserialization vulnerability","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik UI for WPF","kev":false,"epss":0.00246,"kevAdded":null},{"id":"CVE-2024-7576","published":"2024-09-25T13:57:35.699Z","updated":"2024-09-25T14:17:24.219Z","title":"Progress UI for WPF format provider unsafe deserialization vulnerability","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik UI for WPF","kev":false,"epss":0.00463,"kevAdded":null},{"id":"CVE-2024-7575","published":"2024-09-25T13:55:59.435Z","updated":"2024-09-25T14:19:30.019Z","title":"Improper neutralization special element in hyperlinks","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik UI for WPF","kev":false,"epss":0.00703,"kevAdded":null},{"id":"CVE-2024-7679","published":"2024-09-25T13:53:01.102Z","updated":"2024-09-25T14:22:18.409Z","title":"Improper neutralization special element in hyperlinks","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik UI for WinForms","kev":false,"epss":0.00744,"kevAdded":null},{"id":"CVE-2024-4837","published":"2024-05-15T17:04:05.705Z","updated":"2024-08-01T20:55:09.990Z","title":"Trust Boundary Violation Vulnerability","severity":"MEDIUM","score":5.3,"vendor":"Progress Software","product":"Telerik Report Server","kev":false,"epss":0.00431,"kevAdded":null},{"id":"CVE-2024-4357","published":"2024-05-15T16:58:31.306Z","updated":"2024-08-01T20:40:46.481Z","title":"XML External Entity Processing Information Disclosure","severity":"MEDIUM","score":6.5,"vendor":"Progress Software","product":"Telerik Report Server","kev":false,"epss":0.007,"kevAdded":null},{"id":"CVE-2024-2389","published":"2024-04-02T12:22:45.131Z","updated":"2025-12-16T18:13:17.105Z","title":"Flowmon Unauthenticated Command Injection Vulnerability","severity":"CRITICAL","score":10,"vendor":"Progress Software","product":"Flowmon","kev":false,"epss":0.93037,"kevAdded":null},{"id":"CVE-2024-2449","published":"2024-03-22T13:35:39.103Z","updated":"2024-08-12T19:23:36.632Z","title":"LoadMaster Cross-Site Request Forgery (CSRF)","severity":"HIGH","score":7.5,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.1288,"kevAdded":null},{"id":"CVE-2024-2448","published":"2024-03-22T13:32:43.657Z","updated":"2024-11-15T20:05:31.723Z","title":"LoadMaster Command Injection Vulnerability","severity":"HIGH","score":8.4,"vendor":"Progress Software","product":"LoadMaster","kev":false,"epss":0.55422,"kevAdded":null},{"id":"CVE-2024-2291","published":"2024-03-20T14:46:59.040Z","updated":"2024-08-01T19:11:53.265Z","title":"MOVEit Transfer Logging Bypass Vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Progress Software","product":"MOVEit Transfer","kev":false,"epss":0.00385,"kevAdded":null},{"id":"CVE-2024-1212","published":"2024-02-21T17:39:12.599Z","updated":"2025-10-21T23:05:23.864Z","title":"LoadMaster Pre-Authenticated OS Command Injection","severity":"CRITICAL","score":10,"vendor":"Progress Software","product":"LoadMaster","kev":true,"epss":0.95388,"kevAdded":"2024-11-18"},{"id":"CVE-2024-0833","published":"2024-01-31T15:15:14.656Z","updated":"2024-10-17T17:51:31.449Z","title":"Privilege Elevation via Telerik Test Studio","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik Test Studio","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2024-0832","published":"2024-01-31T15:14:44.556Z","updated":"2024-08-23T18:18:34.073Z","title":"Privilege Elevation via Telerik Reporting Installer","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik Reporting","kev":false,"epss":0.00193,"kevAdded":null},{"id":"CVE-2024-0219","published":"2024-01-31T15:11:21.337Z","updated":"2025-05-29T15:03:44.426Z","title":"Privilege Elevation via Telerik JustDecompile Installer","severity":"HIGH","score":7.8,"vendor":"Progress Software","product":"Telerik JustDecompile","kev":false,"epss":0.00189,"kevAdded":null}]}