{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Progress Software vulnerabilities","home_page_url":"https://patchfirst.co/vendor/progress/","feed_url":"https://patchfirst.co/feed/vendor/progress.json","description":"New and newly exploited Progress Software CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-90868","url":"https://patchfirst.co/cve/CVE-2026-90868/","title":"CVE-2026-90868: An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on…","content_text":"Progress Software · WS_FTP Server. Not in CISA KEV. EPSS 1.5% (higher than 74.1% of CVEs). CVSS 9.9 CRITICAL. Priority 22.4 of 100.","summary":"An OS command injection vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on…","date_published":"2026-10-29T00:00:00.000Z","date_modified":"2026-10-30T18:18:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":22.4,"kev":null,"epss":{"score":0.01493,"percentile":0.74123},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"WS_FTP Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-90866","url":"https://patchfirst.co/cve/CVE-2026-90866/","title":"CVE-2026-90866: A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…","content_text":"Progress Software · WS_FTP Server. Not in CISA KEV. EPSS 0.7% (higher than 54.2% of CVEs). CVSS 9.1 CRITICAL. Priority 17.9 of 100.","summary":"A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…","date_published":"2026-10-29T00:00:00.000Z","date_modified":"2026-10-30T18:18:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.9,"kev":null,"epss":{"score":0.0073,"percentile":0.54231},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"WS_FTP Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-90863","url":"https://patchfirst.co/cve/CVE-2026-90863/","title":"CVE-2026-90863: Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7…","content_text":"Progress Software · WS_FTP Server. Not in CISA KEV. EPSS 0.7% (higher than 51.4% of CVEs). CVSS 9.1 CRITICAL. Priority 17.3 of 100.","summary":"Missing authorization in the administrative interface of Progress Software WS_FTP Server versions prior to 2024.0.7…","date_published":"2026-10-29T00:00:00.000Z","date_modified":"2026-10-30T18:18:16.000Z","tags":[],"_patchfirst":{"reason":"published","priority":17.3,"kev":null,"epss":{"score":0.00656,"percentile":0.51394},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"WS_FTP Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-84295","url":"https://patchfirst.co/cve/CVE-2026-84295/","title":"CVE-2026-84295: Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could…","content_text":"Progress Software · WS_FTP Server. Not in CISA KEV. EPSS 0.6% (higher than 46.2% of CVEs). CVSS 10.0 CRITICAL. Priority 16.9 of 100.","summary":"Improper authentication in Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 on Windows could…","date_published":"2026-10-29T00:00:00.000Z","date_modified":"2026-10-30T18:18:13.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.00553,"percentile":0.462},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"WS_FTP Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-90864","url":"https://patchfirst.co/cve/CVE-2026-90864/","title":"CVE-2026-90864: A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…","content_text":"Progress Software · WS_FTP Server. Not in CISA KEV. EPSS 0.5% (higher than 41.3% of CVEs). CVSS 9.1 CRITICAL. Priority 15.3 of 100.","summary":"A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows…","date_published":"2026-10-29T00:00:00.000Z","date_modified":"2026-10-30T18:18:16.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.3,"kev":null,"epss":{"score":0.00479,"percentile":0.4133},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"WS_FTP Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-89068","url":"https://patchfirst.co/cve/CVE-2026-89068/","title":"CVE-2026-89068: Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module)","content_text":"Progress · MOVEit Transfer. Not in CISA KEV. EPSS 0.5% (higher than 45.2% of CVEs). CVSS 9.8 CRITICAL. Priority 18.1 of 100.","summary":"Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module)","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-19T12:21:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.1,"kev":null,"epss":{"score":0.00536,"percentile":0.45187},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"MOVEit Transfer","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-89073","url":"https://patchfirst.co/cve/CVE-2026-89073/","title":"CVE-2026-89073: Insufficient Session Expiration vulnerability in Progress MOVEit Transfer","content_text":"Progress · MOVEit Transfer. Not in CISA KEV. EPSS 0.4% (higher than 34.3% of CVEs). CVSS 9.8 CRITICAL. Priority 15.9 of 100.","summary":"Insufficient Session Expiration vulnerability in Progress MOVEit Transfer","date_published":"2026-10-14T00:00:00.000Z","date_modified":"2026-10-19T12:16:05.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.9,"kev":null,"epss":{"score":0.004,"percentile":0.34285},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"MOVEit Transfer","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-85955","url":"https://patchfirst.co/cve/CVE-2026-85955/","title":"CVE-2026-85955: Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with…","content_text":"Progress Software Corporation · MarkLogic Server. Not in CISA KEV. EPSS 0.6% (higher than 47.3% of CVEs). CVSS 9.9 CRITICAL. Priority 18.6 of 100.","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with…","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-14T11:17:05.000Z","tags":[],"_patchfirst":{"reason":"published","priority":18.6,"kev":null,"epss":{"score":0.00573,"percentile":0.47332},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"MarkLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-85948","url":"https://patchfirst.co/cve/CVE-2026-85948/","title":"CVE-2026-85948: Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw…","content_text":"Progress Software Corporation · MarkLogic Server. Not in CISA KEV. EPSS 0.4% (higher than 39% of CVEs). CVSS 9.9 CRITICAL. Priority 16.9 of 100.","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw…","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-14T11:17:05.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.00449,"percentile":0.39002},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"MarkLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-85947","url":"https://patchfirst.co/cve/CVE-2026-85947/","title":"CVE-2026-85947: Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in…","content_text":"Progress Software Corporation · MarkLogic Server. Not in CISA KEV. EPSS 0.4% (higher than 39% of CVEs). CVSS 9.9 CRITICAL. Priority 16.9 of 100.","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in…","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-14T11:17:05.000Z","tags":[],"_patchfirst":{"reason":"published","priority":16.9,"kev":null,"epss":{"score":0.00449,"percentile":0.39002},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"MarkLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-85956","url":"https://patchfirst.co/cve/CVE-2026-85956/","title":"CVE-2026-85956: Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with…","content_text":"Progress Software Corporation · MarkLogic Server. Not in CISA KEV. EPSS 0.4% (higher than 33.8% of CVEs). CVSS 9.6 CRITICAL. Priority 15.7 of 100.","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with…","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-14T11:17:06.000Z","tags":[],"_patchfirst":{"reason":"published","priority":15.7,"kev":null,"epss":{"score":0.00396,"percentile":0.33834},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"MarkLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-9191","url":"https://patchfirst.co/cve/CVE-2026-9191/","title":"CVE-2026-9191: Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate…","content_text":"Progress Software Corporation · MarkLogic Server. Not in CISA KEV. EPSS 0.3% (higher than 20.1% of CVEs). CVSS 9.6 CRITICAL. Priority 12.9 of 100.","summary":"Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate…","date_published":"2026-10-12T00:00:00.000Z","date_modified":"2026-10-15T16:27:17.000Z","tags":[],"_patchfirst":{"reason":"published","priority":12.9,"kev":null,"epss":{"score":0.00277,"percentile":0.20148},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"MarkLogic Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-91140","url":"https://patchfirst.co/cve/CVE-2026-91140/","title":"CVE-2026-91140: An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software…","content_text":"Progress Software · Autonomous REST Connector GenAI Agents. Not in CISA KEV. EPSS 2.0% (higher than 81.2% of CVEs). CVSS 9.6 CRITICAL. Priority 25.1 of 100.","summary":"An OS command injection vulnerability in the shell-based temporary-file cleanup instructions in Progress Software…","date_published":"2026-10-06T00:00:00.000Z","date_modified":"2026-10-07T04:18:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.1,"kev":null,"epss":{"score":0.02046,"percentile":0.81174},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"Autonomous REST Connector GenAI Agents","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-8037#kev","url":"https://patchfirst.co/cve/CVE-2026-8037/","title":"[KEV] CVE-2026-8037: Progress LoadMaster Command Injection Vulnerability","content_text":"Progress · LoadMaster. In CISA KEV since 2026-08-07. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.9 of 100.","summary":"Progress LoadMaster Command Injection Vulnerability","date_published":"2026-08-07T00:00:00.000Z","date_modified":"2026-10-15T14:17:29.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.9,"kev":{"dateAdded":"2026-08-07","ransomware":false},"epss":{"score":0.99837,"percentile":0.99961},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"LoadMaster","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-2699","url":"https://patchfirst.co/cve/CVE-2026-2699/","title":"CVE-2026-2699: EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)","content_text":"Progress · ShareFile Storage Zones Controller. Not in CISA KEV. EPSS 58.4% (higher than 99.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 74.1 of 100.","summary":"EAR vulnerability in Progress ShareFile Storage Zones Controller (SZC)","date_published":"2026-04-02T00:00:00.000Z","date_modified":"2026-04-08T15:25:21.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":74.1,"kev":null,"epss":{"score":0.58386,"percentile":0.99096},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"ShareFile Storage Zones Controller","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-2701","url":"https://patchfirst.co/cve/CVE-2026-2701/","title":"CVE-2026-2701: RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)","content_text":"Progress · ShareFile Storage Zones Controller. Not in CISA KEV. EPSS 54.5% (higher than 99.02% of CVEs). CVSS 9.1 CRITICAL. Priority 28.6 of 100.","summary":"RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)","date_published":"2026-04-02T00:00:00.000Z","date_modified":"2026-04-03T03:55:26.000Z","tags":[],"_patchfirst":{"reason":"published","priority":28.6,"kev":null,"epss":{"score":0.54539,"percentile":0.99015},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"ShareFile Storage Zones Controller","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-8868","url":"https://patchfirst.co/cve/CVE-2025-8868/","title":"CVE-2025-8868: Chef Automate compliance service SQL Injection Vulnerability","content_text":"Progress Software · Chef Automate. Not in CISA KEV. EPSS 25.9% (higher than 98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 66.5 of 100.","summary":"Chef Automate compliance service SQL Injection Vulnerability","date_published":"2025-09-29T00:00:00.000Z","date_modified":"2025-09-29T12:55:02.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.5,"kev":null,"epss":{"score":0.25948,"percentile":0.9798},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"Chef Automate","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-4885#kev","url":"https://patchfirst.co/cve/CVE-2024-4885/","title":"[KEV] CVE-2024-4885: Progress WhatsUp Gold Path Traversal Vulnerability","content_text":"Progress · WhatsUp Gold. In CISA KEV since 2025-03-03. ENISA EUVD lists it as exploited. EPSS 99.3% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"Progress WhatsUp Gold Path Traversal Vulnerability","date_published":"2025-03-03T00:00:00.000Z","date_modified":"2026-06-17T08:03:06.000Z","tags":["kev","public-exploit","T1068","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2025-03-03","ransomware":false},"epss":{"score":0.99288,"percentile":0.99937},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"WhatsUp Gold","techniqueIds":["T1068","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-1212#kev","url":"https://patchfirst.co/cve/CVE-2024-1212/","title":"[KEV] CVE-2024-1212: Progress Kemp LoadMaster OS Command Injection Vulnerability","content_text":"Progress · Kemp LoadMaster. In CISA KEV since 2024-11-18. ENISA EUVD lists it as exploited. EPSS 95.4% (higher than 99.87% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"Progress Kemp LoadMaster OS Command Injection Vulnerability","date_published":"2024-11-18T00:00:00.000Z","date_modified":"2026-07-13T19:49:31.000Z","tags":["kev","public-exploit","T1133","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2024-11-18","ransomware":false},"epss":{"score":0.95388,"percentile":0.99867},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"Kemp LoadMaster","techniqueIds":["T1133","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-7679","url":"https://patchfirst.co/cve/CVE-2024-7679/","title":"CVE-2024-7679: Improper neutralization special element in hyperlinks","content_text":"Progress Software · Telerik UI for WinForms. Not in CISA KEV. EPSS 0.7% (higher than 54.7% of CVEs). CVSS 7.8 HIGH. Priority 51.4 of 100.","summary":"Improper neutralization special element in hyperlinks","date_published":"2024-09-25T00:00:00.000Z","date_modified":"2024-09-25T14:22:18.000Z","tags":[],"_patchfirst":{"reason":"published","priority":51.4,"kev":null,"epss":{"score":0.00744,"percentile":0.54713},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Progress Software","product":"Telerik UI for WinForms","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-7575","url":"https://patchfirst.co/cve/CVE-2024-7575/","title":"CVE-2024-7575: Improper neutralization special element in hyperlinks","content_text":"Progress Software · Telerik UI for WPF. Not in CISA KEV. EPSS 0.7% (higher than 53.3% of CVEs). CVSS 7.8 HIGH. Priority 51.1 of 100.","summary":"Improper neutralization special element in hyperlinks","date_published":"2024-09-25T00:00:00.000Z","date_modified":"2024-09-25T14:19:30.000Z","tags":[],"_patchfirst":{"reason":"published","priority":51.1,"kev":null,"epss":{"score":0.00703,"percentile":0.53258},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Progress Software","product":"Telerik UI for WPF","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-7576","url":"https://patchfirst.co/cve/CVE-2024-7576/","title":"CVE-2024-7576: Progress UI for WPF format provider unsafe deserialization vulnerability","content_text":"Progress Software · Telerik UI for WPF. Not in CISA KEV. EPSS 0.5% (higher than 40.1% of CVEs). CVSS 7.8 HIGH. Priority 48.5 of 100.","summary":"Progress UI for WPF format provider unsafe deserialization vulnerability","date_published":"2024-09-25T00:00:00.000Z","date_modified":"2024-09-25T14:17:24.000Z","tags":[],"_patchfirst":{"reason":"published","priority":48.5,"kev":null,"epss":{"score":0.00463,"percentile":0.40147},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Progress Software","product":"Telerik UI for WPF","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-8316","url":"https://patchfirst.co/cve/CVE-2024-8316/","title":"CVE-2024-8316: Progress UI for WPF format provider unsafe deserialization vulnerability","content_text":"Progress Software · Telerik UI for WPF. Not in CISA KEV. EPSS 0.2% (higher than 15.9% of CVEs). CVSS 7.8 HIGH. Priority 43.6 of 100.","summary":"Progress UI for WPF format provider unsafe deserialization vulnerability","date_published":"2024-09-25T00:00:00.000Z","date_modified":"2024-09-25T14:16:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":43.6,"kev":null,"epss":{"score":0.00246,"percentile":0.15931},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Progress Software","product":"Telerik UI for WPF","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-6670#kev","url":"https://patchfirst.co/cve/CVE-2024-6670/","title":"[KEV] CVE-2024-6670: Progress WhatsUp Gold SQL Injection Vulnerability","content_text":"Progress · WhatsUp Gold. In CISA KEV since 2024-09-16, known ransomware use. ENISA EUVD lists it as exploited. EPSS 92.9% (higher than 99.83% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 79.8 of 100.","summary":"Progress WhatsUp Gold SQL Injection Vulnerability","date_published":"2024-09-16T00:00:00.000Z","date_modified":"2026-06-17T08:18:27.000Z","tags":["kev","ransomware","public-exploit","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2024-09-16","ransomware":true},"epss":{"score":0.92907,"percentile":0.99831},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"WhatsUp Gold","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-6671","url":"https://patchfirst.co/cve/CVE-2024-6671/","title":"CVE-2024-6671: WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability","content_text":"Progress Software Corporation · WhatsUp Gold. Not in CISA KEV. EPSS 19.0% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 67.9 of 100.","summary":"WhatsUp Gold GetStatisticalMonitorList SQL Injection Authentication Bypass Vulnerability","date_published":"2024-08-29T00:00:00.000Z","date_modified":"2024-09-25T03:55:41.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67.9,"kev":null,"epss":{"score":0.18988,"percentile":0.973},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"WhatsUp Gold","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-5806","url":"https://patchfirst.co/cve/CVE-2024-5806/","title":"CVE-2024-5806: MOVEit Transfer Authentication Bypass Vulnerability","content_text":"Progress · MOVEit Transfer. Not in CISA KEV. EPSS 81.5% (higher than 99.64% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 68.6 of 100.","summary":"MOVEit Transfer Authentication Bypass Vulnerability","date_published":"2024-06-25T00:00:00.000Z","date_modified":"2024-08-01T21:25:02.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":68.6,"kev":null,"epss":{"score":0.81474,"percentile":0.99639},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"MOVEit Transfer","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-4883","url":"https://patchfirst.co/cve/CVE-2024-4883/","title":"CVE-2024-4883: WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability","content_text":"Progress Software Corporation · WhatsUp Gold. Not in CISA KEV. EPSS 64.5% (higher than 99.24% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 31.7 of 100.","summary":"WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability","date_published":"2024-06-25T00:00:00.000Z","date_modified":"2024-08-01T20:55:10.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":31.7,"kev":null,"epss":{"score":0.64535,"percentile":0.99238},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"WhatsUp Gold","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-5010","url":"https://patchfirst.co/cve/CVE-2024-5010/","title":"CVE-2024-5010: WhatsUp Gold TestController multiple information disclosure vulnerabilities","content_text":"Progress Software Corporation · WhatsUp Gold. Not in CISA KEV. EPSS 70.0% (higher than 99.37% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.","summary":"WhatsUp Gold TestController multiple information disclosure vulnerabilities","date_published":"2024-06-25T00:00:00.000Z","date_modified":"2025-02-13T17:53:45.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.1,"kev":null,"epss":{"score":0.69952,"percentile":0.99373},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Progress Software Corporation","product":"WhatsUp Gold","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-4358#kev","url":"https://patchfirst.co/cve/CVE-2024-4358/","title":"[KEV] CVE-2024-4358: Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","content_text":"Progress · Telerik Report Server. In CISA KEV since 2024-06-13. ENISA EUVD lists it as exploited. EPSS 97.5% (higher than 99.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 69.8 of 100.","summary":"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","date_published":"2024-06-13T00:00:00.000Z","date_modified":"2026-06-17T08:01:44.000Z","tags":["kev","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2024-06-13","ransomware":false},"epss":{"score":0.97482,"percentile":0.99899},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"Telerik Report Server","techniqueIds":["T1190"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-2389","url":"https://patchfirst.co/cve/CVE-2024-2389/","title":"CVE-2024-2389: Flowmon Unauthenticated Command Injection Vulnerability","content_text":"Progress Software · Flowmon. Not in CISA KEV. EPSS 93.0% (higher than 99.83% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. Priority 67.0 of 100.","summary":"Flowmon Unauthenticated Command Injection Vulnerability","date_published":"2024-04-02T00:00:00.000Z","date_modified":"2025-12-16T18:13:17.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":67,"kev":null,"epss":{"score":0.93037,"percentile":0.99832},"cvss":{"score":10,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software","product":"Flowmon","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-2448","url":"https://patchfirst.co/cve/CVE-2024-2448/","title":"CVE-2024-2448: LoadMaster Command Injection Vulnerability","content_text":"Progress Software · LoadMaster. Not in CISA KEV. EPSS 55.4% (higher than 99.03% of CVEs). CVSS 8.4 HIGH. Priority 25.7 of 100.","summary":"LoadMaster Command Injection Vulnerability","date_published":"2024-03-22T00:00:00.000Z","date_modified":"2024-11-15T20:05:31.000Z","tags":[],"_patchfirst":{"reason":"published","priority":25.7,"kev":null,"epss":{"score":0.55422,"percentile":0.99033},"cvss":{"score":8.4,"severity":"HIGH","version":"3.1"},"vendor":"Progress Software","product":"LoadMaster","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-40044#kev","url":"https://patchfirst.co/cve/CVE-2023-40044/","title":"[KEV] CVE-2023-40044: Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","content_text":"Progress · WS_FTP Server. In CISA KEV since 2023-10-05, known ransomware use. ENISA EUVD lists it as exploited. EPSS 90.4% (higher than 99.8% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1071.002 File Transfer Protocols; T1202 Indirect Command Execution. Priority 79.1 of 100.","summary":"Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","date_published":"2023-10-05T00:00:00.000Z","date_modified":"2026-06-17T06:15:55.000Z","tags":["kev","ransomware","public-exploit","T1059","T1071.002","T1202"],"_patchfirst":{"reason":"kev","priority":79.1,"kev":{"dateAdded":"2023-10-05","ransomware":true},"epss":{"score":0.90355,"percentile":0.99798},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1"},"vendor":"Progress","product":"WS_FTP Server","techniqueIds":["T1059","T1071.002","T1202"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2023-42657","url":"https://patchfirst.co/cve/CVE-2023-42657/","title":"CVE-2023-42657: WS_FTP Server Directory Traversal","content_text":"Progress Software Corporation · WS_FTP Server. Not in CISA KEV. EPSS 16.0% (higher than 96.9% of CVEs). CVSS 9.9 CRITICAL. Priority 63.7 of 100.","summary":"WS_FTP Server Directory Traversal","date_published":"2023-09-27T00:00:00.000Z","date_modified":"2024-09-24T14:19:21.000Z","tags":[],"_patchfirst":{"reason":"published","priority":63.7,"kev":null,"epss":{"score":0.16008,"percentile":0.96906},"cvss":{"score":9.9,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress Software Corporation","product":"WS_FTP Server","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-34362#kev","url":"https://patchfirst.co/cve/CVE-2023-34362/","title":"[KEV] CVE-2023-34362: Progress MOVEit Transfer SQL Injection Vulnerability","content_text":"Progress · MOVEit Transfer. In CISA KEV since 2023-06-02, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1082 System Information Discovery; T1105 Ingress Tool Transfer; T1136 Create Account; +1 more. Named in 2 threat reports. Priority 86.0 of 100.","summary":"Progress MOVEit Transfer SQL Injection Vulnerability","date_published":"2023-06-02T00:00:00.000Z","date_modified":"2026-06-17T06:03:28.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059","T1005","T1082","T1105","T1136","T1531"],"_patchfirst":{"reason":"kev","priority":86,"kev":{"dateAdded":"2023-06-02","ransomware":true},"epss":{"score":0.99934,"percentile":0.9997},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"MOVEit Transfer","techniqueIds":["T1190","T1059","T1005","T1082","T1105","T1136","T1531"],"reportCount":2,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-18935#kev","url":"https://patchfirst.co/cve/CVE-2019-18935/","title":"[KEV] CVE-2019-18935: Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","content_text":"Progress · Telerik UI for ASP.NET AJAX. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.7% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1041 Exfiltration Over C2 Channel; T1496 Resource Hijacking; T1505.003 Web Shell. Named in 1 threat report. Priority 83.7 of 100.","summary":"Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T02:25:36.000Z","tags":["kev","ransomware","public-exploit","T1190","T1041","T1496","T1505.003"],"_patchfirst":{"reason":"kev","priority":83.7,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.99737,"percentile":0.99954},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"Telerik UI for ASP.NET AJAX","techniqueIds":["T1190","T1041","T1496","T1505.003"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2017-9248#kev","url":"https://patchfirst.co/cve/CVE-2017-9248/","title":"[KEV] CVE-2017-9248: Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","content_text":"Progress · ASP.NET AJAX and Sitefinity. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 75.1% (higher than 99.51% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1552 Unsecured Credentials. Priority 69.8 of 100.","summary":"Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T01:27:44.000Z","tags":["kev","public-exploit","T1190","T1552"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.75098,"percentile":0.99508},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Progress","product":"ASP.NET AJAX and Sitefinity","techniqueIds":["T1190","T1552"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}