Progress known exploited vulnerabilities
The Beam CVE database tracks 9 known exploited vulnerabilities for Progress: 8 critical and 1 high severity. The newest is CVE-2026-8037, published Jun 4, 2026.
These are the Progress vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 9
- Critical
- 8
- Known exploited (CISA KEV)
- 9
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-8037
Progress LoadMaster Command Injection Vulnerability
critical9.8ExploitedJun 4, 2026CVE-2024-6670
Progress WhatsUp Gold SQL Injection Vulnerability
critical9.8ExploitedAug 29, 2024CVE-2024-4885
Progress WhatsUp Gold Path Traversal Vulnerability
critical9.8ExploitedJun 25, 2024CVE-2024-4358
Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
critical9.8ExploitedMay 29, 2024CVE-2024-1212
Progress Kemp LoadMaster OS Command Injection Vulnerability
critical9.8ExploitedFeb 21, 2024CVE-2023-40044
Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
high8.8ExploitedSep 27, 2023CVE-2023-34362
Progress MOVEit Transfer SQL Injection Vulnerability
critical9.8ExploitedJun 2, 2023CVE-2019-18935
Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
critical9.8ExploitedDec 11, 2019CVE-2017-9248
Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
critical9.8ExploitedJul 3, 2017
