Progress
9 Progress flaws are on CISA's list of vulnerabilities attackers have used, 1 of them added in 2026. CISA says 4 are known to be used by ransomware. The latest was added Aug 7, 2026.
9on CISA's list, all time
1added in 2026
1in the last 90 days
4used by ransomware
1zero-days, all time
Exploited flaws added each year
Most-hit products
| Product | Exploited flaws | Most recent |
|---|---|---|
| WhatsUp Gold | 2 | Mar 3, 2025 |
| LoadMaster | 1 | Aug 7, 2026 |
| Kemp LoadMaster | 1 | Nov 18, 2024 |
| Telerik Report Server | 1 | Jun 13, 2024 |
| WS_FTP Server | 1 | Oct 5, 2023 |
| MOVEit Transfer | 1 | Jun 2, 2023 |
| ASP.NET AJAX and Sitefinity | 1 | Nov 3, 2021 |
| Telerik UI for ASP.NET AJAX | 1 | Nov 3, 2021 |
Latest Progress flaws
- LoadMasterProgress LoadMaster Command Injection Vulnerability
- WhatsUp GoldProgress WhatsUp Gold Path Traversal Vulnerability
- Kemp LoadMasterProgress Kemp LoadMaster OS Command Injection Vulnerability
- WhatsUp GoldProgress WhatsUp Gold SQL Injection Vulnerability
- Telerik Report ServerProgress Telerik Report Server Authentication Bypass by Spoofing Vulnerability
- WS_FTP ServerProgress WS_FTP Server Deserialization of Untrusted Data Vulnerability
- MOVEit TransferProgress MOVEit Transfer SQL Injection Vulnerability
- ASP.NET AJAX and SitefinityProgress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability
- Telerik UI for ASP.NET AJAXProgress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability
Counts come from CISA's Known Exploited Vulnerabilities catalog, which lists flaws with reliable evidence of real attacks. A higher count often reflects how widely a vendor's products are used and targeted, not only how secure they are.