Read the docs

Progress

Records437All Threatist records
Exploited (KEV)10In CISA KEV
CVSS critical95CVSS 9.0–10.0
CVSS high231CVSS 7.0–8.9

Exploited now

Progress records in CISA KEV
TI-2026-07083 Progress LoadMaster Command Injection Vulnerability Priority CRITICAL 100KEV 2026-08-07TI-2024-04541 Progress WhatsUp Gold Path Traversal Vulnerability Priority CRITICAL 100KEV 2025-03-03TI-2024-01127 Progress Kemp LoadMaster OS Command Injection Vulnerability Priority CRITICAL 100KEV 2024-11-18TI-2024-06182 Progress WhatsUp Gold SQL Injection Vulnerability Priority CRITICAL 100KEV 2024-09-16TI-2024-04060 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability Priority CRITICAL 100KEV 2024-06-13TI-2023-20934 Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability Priority CRITICAL 100KEV 2023-10-05

Components

Products in the NVD configurations · select one to filter the records
Whatsup Gold 62 records CRITICAL Moveit Transfer 49 records CRITICAL Ws Ftp Server 28 records CRITICAL Loadmaster 26 records CRITICAL Sitefinity 24 records CRITICAL Telerik Ui For Asp.net Ajax 21 records CRITICAL Kendo Ui 14 records LOW Telerik Reporting 14 records MEDIUM

Records

11 records in Connection Manager For Objectscale · all components

TI-2026-07083 CVE-2026-8037 · GHSA-57pc-jm9r-hgj4

Command injection in Progress LoadMaster

Priority CRITICAL 100KEV

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in mu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99794 Published 2026-06-04 Fixed in V7.2.63.2, V7.2.54.18 CWE-77
TI-2025-12291 CVE-2025-13444 · GHSA-xfx9-x566-2hwr

OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster

Priority MEDIUM 61

OS Command Injection Remote Code Execution Vulnerability in API in Progress LoadMaster allows an authenticated attacker with “User Administration” permissions to execute arbitrary commands on the LoadMaster appliance by…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.27217 Published 2026-01-13 Fixed in V7.2.62.2, V7.2.54.16 +1 CWE-78
TI-2026-03031 CVE-2026-3518 · GHSA-wvwg-7g9q-g3v4

Command injection in Progress LoadMaster

Priority MEDIUM 55

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting uns…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.16877 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2026-03030 CVE-2026-3517 · GHSA-rw4j-jhfh-fr2h

Command injection in Progress LoadMaster

Priority MEDIUM 54

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “Geo Administration” permissions to execute arbitrary commands on the LoadMaster appliance by…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.15488 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2026-03506 CVE-2026-4048 · GHSA-pwx9-99jm-fx95

Command injection in Progress LoadMaster

Priority MEDIUM 43

OS Command Injection Remote Code Execution Vulnerability in UI in Progress ADC Products allows an authenticated attacker with “All” permissions to execute arbitrary commands on the LoadMaster appliance by exploiting unsa…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.02132 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2026-03032 CVE-2026-3519 · GHSA-g4q4-3mm2-2w69

Command injection in Progress LoadMaster

Priority MEDIUM 43

OS Command Injection Remote Code Execution Vulnerability in API in Progress ADC Products allows an authenticated attacker with “VS Administration” permissions to execute arbitrary commands on the LoadMaster appliance by…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.02134 Published 2026-04-20 Fixed in V7.2.63.0 CWE-77
TI-2026-42564 CVE-2026-59688 · GHSA-c7jf-f6hx-vphp

OS command injection in Progress LoadMaster

Priority MEDIUM 42

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary op…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01677 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-78
TI-2026-42563 CVE-2026-59687 · GHSA-9x4p-3pwq-9h9m

OS command injection in Progress LoadMaster

Priority MEDIUM 42

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary op…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01677 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-78
TI-2026-42562 CVE-2026-59686 · GHSA-85mv-2c69-64f5

OS command injection in Progress LoadMaster

Priority MEDIUM 42

An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary op…

CVSS 3.1HIGH 8.4 Adjacent network High privileges No interaction EPSS 0.01677 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-78
TI-2026-42566 CVE-2026-59690 · GHSA-68jj-c942-f24v

Missing authorization in Progress LoadMaster

Priority LOW 36

A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00257 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 +1 CWE-862
TI-2026-42565 CVE-2026-59689 · GHSA-xm37-wf3w-9rh5

Incorrect authorization in Progress LoadMaster

Priority LOW 36

An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privilege…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00257 Published 2026-07-27 Fixed in 7.2.63.3, 7.2.54.19 CWE-863
Open these records in search →