Telerik Document Processing before 2026.3.1027 can exhaust resources (CVE-2026-118035)
Canada's Cyber Centre points administrators to Progress's advisory for RadWordsProcessing and says to apply updates when available.
40
Vendor
Progress
- Mentions · 7d3
- Mentions · 30d10
- All mentions11
- First seenAug 20, 2026
- Last mentioned4d ago
Timeline
11 articles · newest firstBuyer’s guide ranks nine managed file transfer vendors for 2026
The guide treats gateway exposure, patch speed, and past exploitation as selection criteria ahead of scheduling features.
22
2026 buyer’s guide ranks 12 secure file-sharing platforms
The guide scores Microsoft, Egnyte, Box, Nextcloud, Kiteworks and others on governance, encryption and deployment, not on a new incident.
18
2026 buyer’s ranking puts Axway first among nine MFT vendors
Editorial scores, not lab tests, rank Axway, IBM Sterling and Progress MOVEit on a podium weighted 30% to security posture.
22
Box tops a 2026 ranking of secure file-sharing platforms
The editorial list scores ten vendors on governance, usability, encryption, compliance evidence and pricing, with no lab testing.
18
Progress security advisory (AV26-1058)
Canada’s Cyber Centre urges updates for critical MOVEit Transfer flaws fixed in 2025.1.6 and 2026.0.4.
58
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.
68
Progress security advisory (AV26-1031)
Canada's Cyber Centre warns Progress MarkLogic before 11.3.7 and 12.1.0 needs security updates.
26
Critical Progress DataDirect GenAI Flaw Lets Attackers Execute Arbitrary OS Commands
Progress warns CVE-2026-91140 lets crafted OpenAPI files run OS commands in DataDirect GenAI agents.
58
Critical Progress DataDirect GenAI Flaw Lets Malicious OpenAPI Files Execute OS Commands
Progress warns CVE-2026-91140 lets malicious OpenAPI files run OS commands in DataDirect GenAI agents.
55
U.S. CISA adds a MLflow flaw to its Known Exploited Vulnerabilities catalog
CISA added actively exploited MLflow SSRF flaw CVE-2026-64849 (CVSS 9.3) to its KEV catalog; attackers are stealing cloud credentials from exposed instances.
85
Related CVEs
by mentions- OS Command Injection via Malicious OpenAPI Docs in Progress ARCGenAI-Generator 2.0
- CVE-2018-10562100%9.8Unauthenticated RCE in Dasan GPON Routers (CVE-2018-10562)
- CVE-2019-0708100%9.8Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)
- CVE-2025-3248100%9.8Unauthenticated RCE in Langflow /api/v1/validate/code
- CVE-2026-6484910%9.3Unauthenticated SSRF in MLflow Exposes Cloud Credentials and Secrets
- CVE-2017-0147100%7.5Information Disclosure in Microsoft Windows SMBv1 Server (CVE-2017-0147)
- CVE-2019-1226023%9.8Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4)
- CVE-2019-1225575%9.8Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4)
- DoS in Telerik RadWordsProcessing before 2026.3.1027
- CVE-2024-759144%7.2Improper Input Validation vulnerability in Progress LoadMaster allows OS Command Injection.This issue affects
Appears with
- Progressorganization · 4
- Microsoftvendor · 3
- Fortravendor · 3
- Kiteworksvendor · 3
- IBMvendor · 3
- Canadian Centre for Cyber Securityorganization · 3
- MOVEitproduct · 2
- Globalscape EFTproduct · 2
- SEEBURGERvendor · 2
- Boxvendor · 2
- Egnytevendor · 2
- OneDriveproduct · 2
- Axwayvendor · 2
- DataDirect Autonomous REST Connectorproduct · 2
- GoAnywhereproduct · 2
- Redwoodvendor · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.