Progress
In 12 briefs, most recently 13 October 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Known exploited (CISA KEV)
9 Progress vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 4 of them used in ransomware campaigns. Most recent:
- CVE-2026-8037 Progress LoadMaster Command Injection Vulnerability
- CVE-2024-4885 Progress WhatsUp Gold Path Traversal Vulnerability
- CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability
- CVE-2024-6670 Progress WhatsUp Gold SQL Injection Vulnerability
- CVE-2024-4358 Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
- CVE-2023-40044 Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability
- CVE-2023-34362 Progress MOVEit Transfer SQL Injection Vulnerability
- CVE-2019-18935 Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
Coverage in DanSec Daily
- Danfoss-targeted French supermarket fridge sabotage, Yandex data center drone strikes, and Ledger spy-chip wallets.
- Polish CHP plant hacked via private cellular APN, LexisNexis and Valve/CEVA breaches, and actively exploited Progress Kemp LoadMaster flaw.
- Metabase zero-day breaches customer data, Unlimited Technology Systems reports a 3.8M-person healthcare breach, and Claude Code and Gemini CLI flaws expose CI …
- SonicWall SMA 1000 zero-days, Microsoft's record 622-flaw Patch Tuesday and nearly 300 fake GitHub infostealer repos.
- Microsoft ties Salesforce intrusions to ShinyHunters; Nihon Kotsu cyberattack and Lidl breach also covered, plus Russian state hacker sanctions and router …
- The Centers Laboratory breach claimed by WorldLeaks, Progress ShareFile shutdown advice, and actively exploited Joomla extension zero-days added to CISA's KEV …
- ShareFile customers told to shut down storage controllers after an external threat; WP-SHELLSTORM backdoors thousands of WordPress sites; Zimbra critical flaw.
- The Medtronic data breach by ShinyHunters, exposed Oracle E-Business Suite instances under attack, and Scattered Spider arrest news.
- Trellix source code breach, DigiCert certificate revocations after a chat-channel attack, and 40,000+ servers compromised via the cPanel flaw CVE-2026-41940.
- Covers the France Titres government data breach, the $290M Kelp DAO crypto heist tied to North Korean actors, and over 1,500 exposed Perforce P4 servers.
- The EU Commission cloud breach by TeamPCP, the $280M Drift Protocol heist by North Korean actors, and Stryker's data-wiping attack.
- Ahold Delhaize breach hits 2.2M people, Cloudflare mitigates record DDoS, Russia throttles Cloudflare, Citrix Bleed 2 exploited.