Progress patches five high-severity flaws in WS_FTP Server
The recommended build is 2025.0.5, also called 10.0.5; the notice reports no active exploitation.
Stories per day · 30 days
3 RSS
Relatedpatch2privilege-escalation2authentication-bypass1cve1database1denial-of-service1file-transfer1ftp1managed-file-transfer1marklogic1moveit1openssl1ws-ftp1xquery1
8 stories, newest first · one card per story
Stories tagged #progress-software
Progress Software WS_FTP Server prior to 2024.0.6 and 2025.0.3 affected by vulnerability
Progress Software WS_FTP Server versions prior to 2024.0.6 and 2025.0.3 have a vulnerability, according to Canadian Centre for Cyber Security advisory.
Progress Warns of MOVEit Transfer Vulnerabilities Allowing Authentication Bypass and Privilege Escalation
Progress patched 12 MOVEit Transfer flaws, including authentication bypass, with no exploitation reported.
4
Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control
Progress fixed 31 MarkLogic Server flaws, including critical bugs that can give delegated managers persistent admin control.
3
Progress security advisory (AV26-1005)
Canada's Cyber Centre warns of CVE-2026-91140 in Progress ARCGenAI-Generator before version 2.1.
Progress security advisory (AV26-915)
Canadian Cyber Centre advisory AV26-915 warns of a vulnerability in Progress Software Chef Automate prior to 4.13.520.
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.
Progress Software security advisory (AV26-875)
Canada's Cyber Centre warns Progress Telerik UI for ASP.NET AJAX before 2026.3.812 is affected by path traversal and upload tampering flaws, urging updates.