Progress Software

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions2
First seenSep 7, 2026
Last mentioned14d ago

Timeline

2 articles · newest first

Progress Warns of MOVEit Transfer Vulnerabilities Allowing Authentication Bypass and Privilege Escalation

Progress patched 12 MOVEit Transfer flaws, including authentication bypass, with no exploitation reported.

GBHackersOct 16, 14:30 UTC · 14d agoVulnerabilityCVE-2026-89067 CVE-2026-87093 CVE-2026-89068+94

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.

The Hacker NewsSep 7, 11:20 UTC · Sep 7, 2026Exploit / PoCCVE-2026-13181 CVE-2026-13182 CVE-2026-13183+34 · 2 reads

Related CVEs

by mentions

CVE-2019-18935100%9.8
Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX
published Dec 11, 2019Telerik (Progress) UI for ASP.NET AJAXKEVRansomwarePoC ×4
CVE-2026-890689.8
LDAP authentication bypass in Progress MOVEit Transfer
published 16d agoProgress MOVEit Transfer
CVE-2026-890728.8
Incorrect authorization in Progress MOVEit Transfer
published 16d agoProgress MOVEit Transfer
CVE-2026-890768.8
SQL Injection in Progress MOVEit Transfer Custom Reports
published 16d agoProgress MOVEit Transfer
CVE-2026-13185<1%8.1
In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13184<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-890707.5
OIDC capture-replay auth bypass in Progress MOVEit Transfer
published 16d agoProgress MOVEit Transfer
CVE-2026-13183<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-13182<1%7.5
In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse…
published Jul 22, 2026progress telerik ui for asp.net ajax
CVE-2026-890695.4
Cross-site scripting in Progress MOVEit Transfer Ad Hoc
published 16d agoProgress MOVEit Transfer (Ad Hoc module)

Appears with

Progress Softwarevendor · 2
Telerik UI for ASP.NET AJAXproduct · 1
Telerikorganization · 1
TantoSecorganization · 1
Telerikvendor · 1
CODE WHITEorganization · 1
Cl0pthreat actor · 1
RadPersistenceManagerproduct · 1
IONIXorganization · 1
RadAsyncUploadproduct · 1
MOVEit Transferproduct · 1
RadDockLayoutproduct · 1

Entities are extracted by the model from each article. First seen Sep 7, 2026, last mentioned 14d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.