ZeusQA
Start free

Known exploited vulnerabilities

Progress vulnerabilities attackers have used

Every Progress vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.

The short answer

CISA lists 9 Progress vulnerabilities as exploited in the wild, 1 of them added in the last 12 months and 4 used in ransomware campaigns. The most recent is CVE-2026-8037, added Aug 7, 2026. WhatsUp Gold has the most entries (2).

In KEV, all time
9
Added, last 12 months
1
Used in ransomware
4
New CVEs this week
0

By product

WhatsUp Gold (2), ASP.NET AJAX and Sitefinity (1), Kemp LoadMaster (1), LoadMaster (1), MOVEit Transfer (1), Telerik Report Server (1), Telerik UI for ASP.NET AJAX (1), WS_FTP Server (1).

Every Progress entry in CISA KEV

  1. CVE-2026-8037

    Added · due

    Progress LoadMaster Command Injection Vulnerability

    Progress LoadMaster contains a command injection vulnerability that allows an un-authenticated attacker to execute arbitrary commands on the LoadMaster appliance by exploiting unsanitized input in multiple command endpoints.

  2. CVE-2024-4885

    Added · due

    Progress WhatsUp Gold Path Traversal Vulnerability

    Progress WhatsUp Gold contains a path traversal vulnerability that allows an unauthenticated attacker to achieve remote code execution.

  3. CVE-2024-1212

    Added · due

    Progress Kemp LoadMaster OS Command Injection Vulnerability

    Progress Kemp LoadMaster contains an OS command injection vulnerability that allows an unauthenticated, remote attacker to access the system through the LoadMaster management interface, enabling arbitrary system command execution.

  4. CVE-2024-6670

    RansomwareAdded · due

    Progress WhatsUp Gold SQL Injection Vulnerability

    Progress WhatsUp Gold contains a SQL injection vulnerability that allows an unauthenticated attacker to retrieve the user's encrypted password if the application is configured with only a single user.

  5. CVE-2024-4358

    Added · due

    Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

    Progress Telerik Report Server contains an authorization bypass by spoofing vulnerability that allows an attacker to obtain unauthorized access.

  6. CVE-2023-40044

    RansomwareAdded · due

    Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

    Progress WS_FTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system.

  7. CVE-2023-34362

    RansomwareAdded · due

    Progress MOVEit Transfer SQL Injection Vulnerability

    Progress MOVEit Transfer contains a SQL injection vulnerability that could allow an unauthenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL…

  8. CVE-2019-18935

    RansomwareAdded · due

    Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability

    Progress Telerik UI for ASP.NET AJAX contains a deserialization of untrusted data vulnerability through RadAsyncUpload which leads to code execution on the server in the context of the w3wp.exe process.

  9. CVE-2017-9248

    Added · due

    Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability

    Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or the MachineKey), perform…

Related

Know the day a CVE lands in your code

Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.

Start freeSee how a run works