Progress Software vulnerabilities
147 published CVEs name Progress Software among the affected products; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 147
- Last 12 months
- 109
- Critical
- 16
- Known exploited
- 2
Critical 16High 79Medium 51Low 1Not scored 0
CVEs per yearBy the year they were published
- 202422
- 202516
- 2026109
Known exploitedNewest addition to KEV first
- CVE-2026-8037
OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF
Progress Software · LoadMaster
ExploitedCritical9.6 - CVE-2024-1212
LoadMaster Pre-Authenticated OS Command Injection
Progress Software · LoadMaster
ExploitedCritical10.0
Newest CVEs
- CVE-2026-106128
Prototype Pollution in Progress Software Kendo UI for Vue
Progress Software · Kendo UI for Vue
Medium4.1 - CVE-2026-106127
Prototype Pollution in Progress Software KendoReact
Progress Software · KendoReact
Medium4.1 - CVE-2026-106144
Prototype Pollution in Progress Software Kendo UI for Angular
Progress Software · Kendo UI for Angular
Medium4.1 - CVE-2026-106143
Cross-Site Scripting in Progress Software Kendo UI for Vue
Progress Software · Kendo UI for Vue
Medium5.4 - CVE-2026-106142
Cross-Site Scripting in Progress Software KendoReact
Progress Software · KendoReact
Medium5.4 - CVE-2026-106141
Cross-Site Scripting in Progress Software Kendo UI for Angular
Progress Software · Kendo UI for Angular
Medium5.4 - CVE-2026-106136
Cross-Site Scripting in Progress Software KendoReact
Progress Software · KendoReact
Medium5.4 - CVE-2026-106134
Cross-Site Scripting in Progress Software KendoReact
Progress Software · KendoReact
Medium5.4 - CVE-2026-106135
Cross-Site Scripting in Progress Software Kendo UI for Angular
Progress Software · Kendo UI for Angular
Medium5.4 - CVE-2026-104656
Cross-site Scripting in Progress Telerik Fiddler Everywhere
Progress Software · Progress® Telerik® Fiddler® Everywhere
High7.3