Progress known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 9 Progress vulnerabilities: 1 added in the last 365 days, 9 rated critical (CVSS 9 or higher), and 4 with known ransomware use. The most recent was added Aug 7, 2026.

RSS feed for Progress exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEV	CVE	Vulnerability	CVSS	EPSS	Federal due date	Ransomware use
2026-08-07	CVE-2026-8037	Progress LoadMaster Command Injection Vulnerability	9.6 (v3.1)	99.8%	2026-08-10	Unknown
2025-03-03	CVE-2024-4885	Progress WhatsUp Gold Path Traversal Vulnerability	9.8 (v3.1)	99.3%	2025-03-24	Unknown
2024-11-18	CVE-2024-1212	Progress Kemp LoadMaster OS Command Injection Vulnerability	10 (v3.1)	95.4%	2024-12-09	Unknown
2024-09-16	CVE-2024-6670	Progress WhatsUp Gold SQL Injection Vulnerability	9.8 (v3.1)	93.0%	2024-10-07	Known
2024-06-13	CVE-2024-4358	Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability	9.8 (v3.1)	97.5%	2024-07-04	Unknown
2023-10-05	CVE-2023-40044	Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability	10 (v3.1)	90.4%	2023-10-26	Known
2023-06-02	CVE-2023-34362	Progress MOVEit Transfer SQL Injection Vulnerability	9.8 (v3.1)	>99.9%	2023-06-23	Known
2021-11-03	CVE-2017-9248	Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability	9.8 (v3.1)	75.1%	2022-05-03	Unknown
2021-11-03	CVE-2019-18935	Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability	9.8 (v3.1)	99.7%	2022-05-03	Known