Do Son Progress DataDirect vulnerability CVE-2026-91140 enables command injection via crafted OpenAPI files in AI agents. Pull version 2.1 now.
Progress
Progress patched 10 MarkLogic Server vulnerabilities, including auth bypass and privilege escalation flaws rated up to CVSS 9.9. Details inside.
Take action against CVE-2024-56131 and other vulnerabilities affecting LoadMaster. Upgrade now to protect your system from potential attacks.
Uncover the details of the CVE-2024-8785 exploit in WhatsUp Gold. Find out how an unauthenticated remote attacker can gain control through registry modifications and what you can do to mitigate the risk.
Learn about the critical flaws discovered in WhatsUp Gold, including CVE-2024-46909 & CVE-2024-8785, and the potential risks they pose for network infrastructure.
Critical vulnerability (CVE-2024-7591) in Progress LoadMaster ADC and load balancer. Learn how unauthenticated, remote attackers can execute system commands.
Learn about the severe risks posed by CVE-2024-6670, CVE-2024-6671 and other vulnerabilities in Progress WhatsUp Gold.
Progress has issued a dire warning to all users of its WhatsUp Gold network monitoring software, revealing a series of severe vulnerabilities
A critical vulnerability (CVE-2024-4358) has been discovered in Progress Telerik Report Server, a popular report management solution
The flaw, designated as CVE-2024-2389, could give attackers unfettered access to sensitive network infrastructure.
A major security flaw (CVE-2024-1800) has been discovered in the Progress Telerik Report Server, a widely used business reporting solution
Researcher published the technical details & PoC exploit for a severe flaw in Progress Kemp LoadMaster load balancers (CVE-2024-1212, CVSS 10)
This flaw (CVE-2024-1403) carries a CVSS score of 10 – the highest severity rating possible, affecting Progress OpenEdge
Rhino Security Labs uncovered this flaw (CVE-2024-1212, CVSS 10) – an unauthenticated RCE allowing attackers to complete a system takeover
CVE-2023-42659 and carrying a CVSS score of 9.1, allows authenticated Ad Hoc Transfer users to upload files to arbitrary locations
CVE-2023-35708 can act as gateways to escalated privileges, enabling potential unauthorized access to the user environment.